Lucene search
K

8 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in discordi.js (npm)

The package discordi.js was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-18484 Malicious code in discordi.js (npm)

The package discordi.js was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2018/08/06 9:43 p.m.25 views

GHSA-FV9M-F7W4-889C discordi.js is malware

The discordi.js package is malware that attempts to discover and exfiltrate a user's Discord credentials, sending them to pastebin. All versions have been unpublished from the npm registry. Recommendation Do not install / use this module. It has been unpublished from the npm registry but may exis...

7.3CVSS7.2AI score0.00199EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/06 9:43 p.m.241 views

discordi.js is malware

The discordi.js package is malware that attempts to discover and exfiltrate a user's Discord credentials, sending them to pastebin. All versions have been unpublished from the npm registry. Recommendation Do not install / use this module. It has been unpublished from the npm registry but may exis...

7.3CVSS7AI score0.00199EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2018/06/12 12:0 a.m.72 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.3AI score0.17051EPSS
Exploits4References101
NVD
NVD
added 2018/06/07 2:29 a.m.10 views

CVE-2017-16207

discordi.js is a malicious module based on the discord.js library that exfiltrates login tokens to pastebin...

7.3CVSS7.1AI score0.00199EPSS
Exploits0References1
CVE
CVE
added 2018/06/07 2:0 a.m.50 views

CVE-2017-16207

The CVE-2017-16207 entry corresponds to the discordi.js package malware that exfiltrates Discord login tokens to pastebin. Affected component: the discordi.js library/module. Root cause: malicious code in the package designed to discover and exfiltrate user credentials. Impact: credential leakage...

7.3CVSS7AI score0.00199EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/06/07 2:0 a.m.11 views

CVE-2017-16207

discordi.js is a malicious module based on the discord.js library that exfiltrates login tokens to pastebin...

7.1AI score0.00199EPSS
Exploits0References1
Rows per page
Query Builder