Malicious code in xerohub-discord-voice-v2 (npm)

Source: amazon-inspector cf9b6541cc4324cf5972b8544d673b91874dac770763bac335d3c8900292dfcd The package advertises a Discord voice client via an exported startVoiceJoinerconfig API. When a caller invokes it with their Discord credentials, XerohubVoice.js validates the supplied USERTOKEN and then...