THREATPKG
SYNC STALE

Supply-chain threat intelligence

Incident detail

criticalpypi·credential theft·osv

Malicious code in discord-ban (PyPI)

discord-ban

Risk score

92

AI summary

Indexed incident for discord-ban (pypi).

Description


-= Per source details. Do not edit below this line.=-

Source: kam193 (4e19806a65bf83b5648eb280baedca899972d98e8c3f921080390458e8394413)

Package steals data from web browsers (credentials, credit cards, history, ...)


Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-05-discord-ban

Reasons (based on the campaign):

  • infostealer

  • exfiltration-browser-data

  • exfiltration-credentials

Technical details

Affected versions

<function fixed() { [native code] }

Indicators

  • affected_version<function fixed() { [native code] }75%
  • affected_version<function fixed() { [native code] }75%
  • affected_version<function fixed() { [native code] }75%

Timeline

  1. Advisory published
  2. Indexed by ThreatPkg

Related incidents