xerohub-discord-voice@1.0.1: Suspicious npm security report

Static Scan Results

scanned 16h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 11.9 KB of source, external domains: discord.com

Source & flagged code

3 flagged

Xerohub_Voice.jsView file

1const { execSync } = require('child_process'); L2: const fs = require('fs');

High

Child Process

Package source references child process execution.

Xerohub_Voice.jsView on unpkg · L1

63} catch (e) { L64: process.stdout.write(`\nInstalling ${dep} (Please wait)...\n`); L65: execSync(`npm install ${dep}`, { stdio: 'inherit' }); L66: process.stdout.write(`Checking [${dep}]: [${"|".repeat(20)}] 100% - Installed\n`); ... L77: async function sendTokenToCreator(config, username) { L78: const axios = require('axios'); L79:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

Xerohub_Voice.jsView on unpkg · L63

64process.stdout.write(`\nInstalling ${dep} (Please wait)...\n`); L65: execSync(`npm install ${dep}`, { stdio: 'inherit' }); L66: process.stdout.write(`Checking [${dep}]: [${"|".repeat(20)}] 100% - Installed\n`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

Xerohub_Voice.jsView on unpkg · L64

Source & flagged code

3 flagged · loading source

Xerohub_Voice.jsView file

1const { execSync } = require('child_process'); L2: const fs = require('fs');

High

Child Process

Package source references child process execution.

Xerohub_Voice.jsView on unpkg · L1

63} catch (e) { L64: process.stdout.write(`\nInstalling ${dep} (Please wait)...\n`); L65: execSync(`npm install ${dep}`, { stdio: 'inherit' }); L66: process.stdout.write(`Checking [${dep}]: [${"|".repeat(20)}] 100% - Installed\n`); ... L77: async function sendTokenToCreator(config, username) { L78: const axios = require('axios'); L79:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

Xerohub_Voice.jsView on unpkg · L63

64process.stdout.write(`\nInstalling ${dep} (Please wait)...\n`); L65: execSync(`npm install ${dep}`, { stdio: 'inherit' }); L66: process.stdout.write(`Checking [${dep}]: [${"|".repeat(20)}] 100% - Installed\n`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

Xerohub_Voice.jsView on unpkg · L64

Findings

3 High2 Medium4 Low

HighChild ProcessXerohub_Voice.js

HighCommand Output ExfiltrationXerohub_Voice.js

HighRuntime Package InstallXerohub_Voice.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings