test_payload_folder
This report shows the evidence for test_payload_folder@1.0.0, the only known version.
OpenSSF/OSV Malicious Advisory
imported 2mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-14191 confirms this npm version as malicious.
Advisory
MAL-2026-14191
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in test_payload_folder (npm)
Details
The package exposes a `startVoiceJoiner(config)` API that accepts a caller-supplied Discord `USER_TOKEN` (and optional `USER_TOKEN_2`) ostensibly for gateway login. Before using the tokens for their advertised purpose, the code calls `sendTokenToCreator`, which builds a payload containing the caller's user token(s), server ID, and channel ID and POSTs it via `axios.post` to a hardcoded webhook constant `YOUR_WEBHOOK_URL`. Callers are not informed that their bearer credentials are copied to a third destination. As shipped, the webhook constant is the placeholder string `YOUR_DISCORD_WEBHOOK_URL_HERE` and is guarded by an early-return check, so the network POST does not fire in the published artifact; however, the full harvest-and-exfil path is wired and a single-line edit to the constant arms it. The package name `test_payload_folder` and Thai-language comments (`ส่งข้อมูล Token กลับหาคุณผ่าน Discord Webhook`, "send token data back to you via Discord webhook") describe the token-relay intent explicitly. Discord user tokens are full-account bearer credentials; the code shape is silent-relay of caller credentials to an author-controlled destination.
References
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
Source contains dormant credential-exfiltration logic, even though it lacks an active destination and requires explicit invocation. No lifecycle or import-time execution is present.
Static reason
One or more suspicious static signals were detected.
Trigger
Consumer calls startVoiceJoiner with a configuration containing USER_TOKEN.
Impact
A modified or configured copy could disclose supplied Discord credentials and identifiers.
Mechanism
Dormant credential-exfiltration webhook plus Discord voice-session client.
AI rationale
Source contains dormant credential-exfiltration logic, even though it lacks an active destination and requires explicit invocation. No lifecycle or import-time execution is present.
Evidence
Xerohub_Voice.jspackage.json
Network endpoints2
discord.com/api/v10/users/@mewss://gateway.discord.gg/?v=10&encoding=json
Independent scan evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for AI warning decision
- Xerohub_Voice.js defines webhook posting of supplied Discord tokens and IDs.
- Webhook destination is a disabled placeholder, but code silently suppresses delivery errors.
- startVoiceJoiner authenticates supplied tokens and opens Discord gateway sessions.
- checkDependencies can run npm install for missing declared dependencies.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Main module only defines/exports functions; import has no observed execution path.
- No active webhook URL or unrelated exfiltration endpoint is present.
- Token handling requires an explicit startVoiceJoiner(config) call and user-supplied config.
Behavioral surface
ChildProcessFilesystemNetworkWebSocket
UrlStrings
Source & flagged code
3 flagged · loading sourceXerohub_Voice.jsView file
1const { execSync } = require('child_process');
L2: const fs = require('fs');
High
63} catch (e) {
L64: process.stdout.write(`\nInstalling ${dep} (Please wait)...\n`);
L65: execSync(`npm install ${dep}`, { stdio: 'inherit' });
L66: process.stdout.write(`Checking [${dep}]: [${"|".repeat(20)}] 100% - Installed\n`);
...
L77: async function sendTokenToCreator(config, username) {
L78: const axios = require('axios');
L79:
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
Xerohub_Voice.jsView on unpkg · L6364process.stdout.write(`\nInstalling ${dep} (Please wait)...\n`);
L65: execSync(`npm install ${dep}`, { stdio: 'inherit' });
L66: process.stdout.write(`Checking [${dep}]: [${"|".repeat(20)}] 100% - Installed\n`);
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
Xerohub_Voice.jsView on unpkg · L64Findings
3 High1 Medium3 Low
HighChild ProcessXerohub_Voice.js
HighCommand Output ExfiltrationXerohub_Voice.js
HighRuntime Package InstallXerohub_Voice.js
MediumNetwork
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to test_payload_folder@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing test_payload_folder@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.