Malicious npm Code Packages Built for Hijacking Discord Servers
-
The lurking code-bombs lift Discord tokens from users of any applications that pulled the packages into their code bases.
https://threatpost.com/malicious-npm-code-packages-discord/176886/