Iyo NPM repository yakaratidza 17 mapakeji akashata akagovaniswa uchishandisa mhando squatting, i.e. nekupihwa kwemazita akafanana nemazita emaraibhurari ane mukurumbira netarisiro yekuti mushandisi achaita typo paanenge achinyora zita racho kana kusaona mutsauko pakusarudza module kubva pane iyo rondedzero.
Iyo discord-selfbot-v14, discord-lofy, discordsystem, uye discord-vilao mapakeji akashandisa yakagadziridzwa vhezheni yepamutemo discord.js raibhurari, iyo inopa mabasa ekudyidzana neDiscord API. Izvo zvinhu zvakashata zvakabatanidzwa mune imwe yemafaira emapakeji uye zvaisanganisira angangoita 4000 mitsara yekodhi, yakasvibiswa uchishandisa zita rakasiyana mangling, tambo encryption, uye kodhi fomati yekutyorwa. Iyo kodhi yakaongorora iyo yemuno FS yeDiscord tokens uye, kana yaonekwa, yaitumira kune vanorwisa server.
Iyo gadziriso-yekukanganisa package yakanzi inogadzirisa tsikidzi muDiscord selfbot, asi yaisanganisira Trojan app inonzi PirateStealer inoba nhamba dzekadhi rechikwereti uye maakaundi ane chekuita neDiscord. Iyo yakaipa chikamu chakaitwa nekuisa JavaScript kodhi muDiscord mutengi.
Iyo prerequests-xcode package yaisanganisira Trojan yekuronga kure kure kune sisitimu yemushandisi, zvichibva paDiscordRAT Python application.
Zvinotendwa kuti vanorwisa vangangoda kuwana Discord maseva kuendesa botnet control poinzi, semumiriri kudhawunirodha ruzivo kubva kune yakakanganiswa masisitimu, kuvhara kurwiswa, kugovera malware pakati pevashandisi veDiscord, kana kutengesa zvekare maakaundi.
Iwo mapakeji ewafer-bind, wafer-autocomplete, wafer-beacon, wafer-caas, wafer-toggle, wafer-geolocation, wafer-image, wafer-form, wafer-lightbox, octavius-public uye mrg-message-broker inosanganisira iyo kodhi. kutumira zviri mukati mezvakasiyana-siyana zvezvakatipoteredza, izvo, semuenzaniso, zvinogona kusanganisira makiyi ekuwana, tokens kana mapassword kune anoenderera mberi ekubatanidza masisitimu kana gore nharaunda seAWS.
Source: opennet.ru