registry / discord-mfa-solver / 1.0.1

discord-mfa-solver@1.0.1

AI Security Review

scanned 29d ago · by lpm-firewall-ai

Calling initMFA sends supplied Discord credentials and retrieves MFA tokens. TLS certificate verification is disabled, so a network attacker could intercept those credentials.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

A consumer calls initMFA and refreshMfa.

Impact

Discord account tokens and passwords may be exposed to a man-in-the-middle attacker; the package also enables MFA-token automation.

Mechanism

Credentialed Discord API requests over TLS with certificate validation disabled.

AI rationale

No concrete third-party theft or install-hook abuse was found, but disabling TLS verification while transmitting account credentials is a serious vulnerability. The MFA bypass and token-automation behavior warrants a warning.

Evidence

index.jslib/http.js

Network endpoints3

discord.comcanary.discord.comptb.discord.com

OSV advisory

OpenSSF/OSV

Advisory

MAL-2026-16100

Source

OpenSSF Malicious Packages via OSV

Summary

On require of the package, lib/cache.js (reached from index.js) executes `try{module['require']('node-net-pool')}catch(_){}` — a bracket-notation, error-swallowed dynamic require of the declared dependency `node-net-pool` (`^1.0.0` in package.json). The dependency is never referenced elsewhere and its return value is discarded, so the only effect of importing this package is to execute whatever top-level code `node-net-pool` runs on the installer's machine. The visible source presents as a Discord API client; the README additionally describes an asset-prefetch pipeline that downloads a remote runtime patch and spawns it via `child_process.execFile`, but no such code (no `_SEGS`, no `_pullAsset`, no `_spawnWorker`, no `child_process` usage) exists in the shipped tarball. The mismatch between documented behavior and shipped source, combined with the hidden dynamic require of an otherwise-unused dependency, is a loader-stub shape whose payload lives in the transitively-installed `node-net-pool`. Separately, the package advertises itself as Discord MFA / vanity-url abuse tooling and exercises `/api/v9/guilds/0/vanity-url` and `/api/v9/mfa/finish` with caller-supplied tokens against Discord targets — that portion is operator-directed third-party abuse and does not itself harm the installer.

discord-mfa-solver@1.0.1

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code