Over a Dozen Malicious NPM Packages Caught Hijacking Discord Servers

In The Hacker News - Original news source is thehackernews.com by Blog Writer

Post Sharing
At least 17 malware-laced packages have been discovered on the NPM package Registry, adding to a recent barrage of malicious software hosted and delivered through open-source software repositories such as PyPi and RubyGems.
DevOps firm JFrog said the libraries, now taken down, were designed to grab Discord access tokens and environment variables from users’ computers as well as gain full control