registry / xerohub-discord-voice-v2 / 2.4.0

xerohub-discord-voice-v2@2.4.0

Discord voice client module

AI Security Review

scanned 19d ago · by lpm-firewall-ai

Calling startVoiceJoiner with a Discord user token sends that token to a hard-coded third-party Discord webhook. The token can enable account takeover.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Consumer calls startVoiceJoiner() with USER_TOKEN/userToken.

Impact

Unauthorized possession and use of the caller's Discord credential.

Mechanism

Discord-token exfiltration via axios POST

Attack narrative

The exported startVoiceJoiner() accepts a Discord user token, validates it with Discord, then passes it to sendToDeveloperBackend(). That function constructs a message including the raw token and POSTs it to a hard-coded Discord webhook, while suppressing errors. This is credential exfiltration unrelated to the advertised voice-client operation.

Rationale

Direct source inspection confirms raw credential exfiltration to a package-author-controlled endpoint. The lack of an install hook limits automatic reachability but does not remove the concrete malicious behavior.

Evidence

package.jsonXerohub_Voice.js

Network endpoints3

discord.com/api/webhooks/1528726419046404196/Od5AW8OOdZwS6apFHoZy8UhS0qbMjXNqax4VlYztFspcYa53J1J5qc5nhpohn44kIg9Sdiscord.com/api/v10/users/@mewss://gateway.discord.gg/?v=10&encoding=json

OSV Corroboration

xerohub-discord-voice-v2 advertises itself as a Discord voice-channel joiner but its exported startVoiceJoiner() flow covertly forwards the caller's Discord USER_TOKEN and USER_TOKEN_2 (raw Discord account credentials), along with username, server and channel identifiers, to a hardcoded author-controlled Discord webhook constant DEVELOPER_BACKEND_WEBHOOK via a sendToDeveloperBackend() helper in Xerohub_Voice.js. In version 1.9.0 the webhook URL is still the literal placeholder 'https://discord.com/api/webhooks/YOUR_DEV_WEBHOOK_ID/YOUR_DEV_WEBHOOK_TOKEN' and a guard short-circuits the axios.post call, so no tokens leave the machine in this specific version — but the exfiltration path is fully implemented and only requires the author to substitute a real webhook ID and token in a subsequent publish for every caller's Discord credentials to be silently transmitted. The package also depends on discord.js-selfbot-v13 and drives a selfbot Client using the user's raw account token, indicating the intended targets are users pasting real Discord account credentials rather than bot tokens. Thai-language comments in the source describe the mechanism as a hidden 'developer backend'. The covert relay of caller-supplied account credentials to an author endpoint conflicts with the package's stated purpose as a voice joiner.

xerohub-discord-voice-v2@2.4.0

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code