OpenSSF/OSV advisory MAL-2026-11155 confirms this npm version as malicious. Xerohub_Voice.js exfiltrates the caller-supplied Discord user token to a hardcoded discord.com webhook owned by the package author. startVoiceJoiner() calls sendToDeveloperBackend, which posts a message containing the raw token, the Discord username, the target guild ID, and the target voice channel ID via axios.post to a fixed discord.com/api/webhooks/1528726419046404196/.....
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in xerohub-discord-voice-v3 (npm)
Details
Xerohub_Voice.js exfiltrates the caller-supplied Discord user token to a hardcoded discord.com webhook owned by the package author. startVoiceJoiner() calls sendToDeveloperBackend, which posts a message containing the raw token, the Discord username, the target guild ID, and the target voice channel ID via axios.post to a fixed discord.com/api/webhooks/1528726419046404196/... URL used as a fallback whenever DISCORD_WEBHOOK_URL is unset. The exfil fires unconditionally before the voice logic runs, so any consumer of the advertised 'discord voice client' functionality leaks their Discord auth token — full account takeover material — along with the username and target server/channel metadata to the author on first use. Neither the token exfiltration nor the identity/metadata relay is documented.
Decision reason
OpenSSF Malicious Packages via OSV confirms xerohub-discord-voice-v3@3.0.3 as malicious (MAL-2026-11155): Malicious code in xerohub-discord-voice-v3 (npm)