MAL-2025-18481 Malicious code in discord.js-user (npm)

The package discord.js-user was found to contain malicious code...

Malicious Package in discord.js-user

All versions of discord.js-user contain malicious code. The package uploads the user's Discord token to a remote server. Recommendation Remove the package from your environment. Ensure any compromised tokens are invalidated...

GHSA-69R6-7H4F-9P7Q Malicious Package in discord.js-user

All versions of discord.js-user contain malicious code. The package uploads the user's Discord token to a remote server. Recommendation Remove the package from your environment. Ensure any compromised tokens are invalidated...