Malicious code in discordjs-invites (npm)

--- Credit: OpenSSF source...

Malicious code in discordjs-fetcher-v13 (npm)

--- Credit: OpenSSF source...

EUVD-2026-3497

Malicious code in mised-discordjs-selfbot-v14 npm...

Malicious code in mised-discordjs-selfbot-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef4b873f610d33783310bfb03753678bb9d0d93412063a29521d960c64c2af2 The package mised-discordjs-selfbot-v14 was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview mised-discordjs-selfbot-v14 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malware in mised-discordjs-selfbot-v14

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in dizcordjs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2022-6154

Malicious code in bioql PyPI...

EUVD-2024-2242

Malicious code in bioql PyPI...

CVE-2024-21521

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash...

Malware in discordjs-webclients

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in discordjs-self-v22.3

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in discordjs-webclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 168188008eac5d6566ff9dd1929ae45ef01c19a0f325ab680beb22b609aa1f5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordjs-self-v22.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95f2a02084b7cd92df40cf973c163288d499c321e099a11fc8dbb42cec5e402b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1114 Malicious code in discordjs-webclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 168188008eac5d6566ff9dd1929ae45ef01c19a0f325ab680beb22b609aa1f5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1113 Malicious code in discordjs-self-v22.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95f2a02084b7cd92df40cf973c163288d499c321e099a11fc8dbb42cec5e402b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-43WQ-XRCM-3VGR @discordjs/opus vulnerable to Denial of Service

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a process crash...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +195 more potentially affected by CVE-2024-21521 via @discordjs/opus (>=0.1.0, <=0.9.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.0, =2.0.0, =1.0.3, =1.0.1, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2024-21521 Source advisory: GHSA-43WQ-XRCM-3VGR...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +195 more potentially affected by CVE-2024-21521 via @discordjs/opus (>=0.1.0, <=0.9.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.0, =2.0.0, =1.0.3, =1.0.1, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2024-21521 Source advisory: OSV:GHSA-43WQ-XRCM-3VGR...

@discordjs/opus vulnerable to Denial of Service

All versions of the package @discordjs/opus are vulnerable to Denial of Service DoS due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a process crash...