xerohub-discord-voice: Suspicious npm security report (Warn)

Loading npm security reports…

Source & flagged code

3 flagged

Xerohub_Voice.jsView file

1const { execSync } = require('child_process'); L2: const fs = require('fs');

High

Child Process

Package source references child process execution.

Xerohub_Voice.jsView on unpkg · L1

63} catch (e) { L64: process.stdout.write(`\nInstalling ${dep} (Please wait)...\n`); L65: execSync(`npm install ${dep}`, { stdio: 'inherit' }); L66: process.stdout.write(`Checking [${dep}]: [${"|".repeat(20)}] 100% - Installed\n`); ... L77: async function sendTokenToCreator(config, username) { L78: const axios = require('axios'); L79:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

Xerohub_Voice.jsView on unpkg · L63

64process.stdout.write(`\nInstalling ${dep} (Please wait)...\n`); L65: execSync(`npm install ${dep}`, { stdio: 'inherit' }); L66: process.stdout.write(`Checking [${dep}]: [${"|".repeat(20)}] 100% - Installed\n`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

Xerohub_Voice.jsView on unpkg · L64

Source & flagged code

3 flagged · loading source

Xerohub_Voice.jsView file

1const { execSync } = require('child_process'); L2: const fs = require('fs');

High

Child Process

Package source references child process execution.

Xerohub_Voice.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

Xerohub_Voice.jsView on unpkg · L63

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

Xerohub_Voice.jsView on unpkg · L64

xerohub-discord-voice: Suspicious npm security report (Warn) | LPM Firewall

xerohub-discord-voice@1.0.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code