Malicious code in carloprojectlesang (npm)

The package carloprojectlesang was found to contain malicious code...

MAL-2025-16557 Malicious code in carloprojectlesang (npm)

The package carloprojectlesang was found to contain malicious code...

Malicious Package in carloprojectlesang

All versions of carloprojectlesang contain obfuscated malware that uploads Discord user tokens to a remote server. This allows attackers to make purchases on behalf of users if they have credit cards linked to their Discord accounts. Recommendation Remove the package from your environment. Review...

GHSA-QJ2G-642F-4JRV Malicious Package in carloprojectlesang

All versions of carloprojectlesang contain obfuscated malware that uploads Discord user tokens to a remote server. This allows attackers to make purchases on behalf of users if they have credit cards linked to their Discord accounts. Recommendation Remove the package from your environment. Review...