MalwarePublished 28 Jul 2026Updated 10 Aug 2026

xerohub-discord-voice-v2 (npm) · Malicious Code

Affects xerohub-discord-voice-v2Source GCVE Database

Malicious package : remove xerohub-discord-voice-v2 and rotate any secrets on hosts that installed it.

Data as of 10 Aug 2026, 15:39 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-11154

What to do

Remove xerohub-discord-voice-v2 from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmxerohub-discord-voice-v2	Affected 1.6.0 – 2.7.0 10 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (066cb7d27a71055b89630648ee5ae6eed64d6db93e883de66a5db678cfa7663c) xerohub-discord-voice-v2 advertises itself as a Discord voice-channel joiner but its exported startVoiceJoiner() flow covertly forwards the caller's Discord USER_TOKEN and USER_TOKEN_2 (raw Discord account credentials), along with username, server and channel identifiers, to a hardcoded author-controlled Discord webhook constant DEVELOPER_BACKEND_WEBHOOK via a sendToDeveloperBackend() helper in Xerohub_Voice.js. In version 1.9.0 the webhook URL is still the literal placeholder 'https://discord.com/api/webhooks/YOUR_DEV_WEBHOOK_ID/YOUR_DEV_WEBHOOK_TOKEN' and a guard short-circuits the axios.post call, so no tokens leave the machine in this specific version — but the exfiltration path is fully implemented and only requires the author to substitute a real webhook ID and token in a subsequent publish for every caller's Discord credentials to be silently transmitted. The package also depends on discord.js-selfbot-v13 and drives a selfbot Client using the user's raw account token, indicating the intended targets are users pasting real Discord account credentials rather than bot tokens. Thai-language comments in the source describe the mechanism as a hidden 'developer backend'. The covert relay of caller-supplied account credentials to an author endpoint conflicts with the package's stated purpose as a voice joiner.

Impact

Exfiltration of Discord user tokens to an attacker-controlled webhook allows full account takeover, including reading and sending messages, accessing server memberships, direct messages, and billing information. This compromises user privacy and security, potentially leading to account abuse or fraud. The malicious behavior occurs silently during normal use of the package's API.

Defensive guidance

Users should avoid using xerohub-discord-voice-v2 versions listed as affected. Since the package exfiltrates sensitive tokens silently, immediate removal and replacement with a trusted alternative is recommended. Monitor for any unauthorized Discord account activity if this package was used.

Summary

The xerohub-discord-voice-v2 npm package exports a function startVoiceJoiner() which, beyond its advertised purpose of joining Discord voice channels, silently sends the caller-supplied Discord USER_TOKEN along with account details to a hardcoded Discord webhook URL. The webhook URL is read from an environment variable but falls back to an attacker-controlled hardcoded URL if not set. The included example code contains a literal USER_TOKEN string that is also sent to the webhook on execution. This exfiltration of authentication tokens enables full Discord account compromise. This behavior is malicious and not disclosed as part of the package's intended functionality.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 5 Aug 2026, 15:36 UTC

Technical details

References

Community reviews