Monday, January 20

Tag: scripting

Harmful PyPi plan takes Discord auth tokens from devs

Harmful PyPi plan takes Discord auth tokens from devs

Technology
A destructive plan called 'pycord-self' on the Python plan index (PyPI) targets Discord designers to take authentication tokens and plant a backdoor for push-button control over the system. The bundle simulates the extremely popular 'discord.py-self,' which has almost 28 million downloads, and even uses the performance of the genuine task. The main bundle is a Python library that enables interaction with Discord's user API and allows designers to manage accounts programmatically. It is usually utilized for messaging and automating interactions, developing of Discord bots, scripting automated small amounts, notices or reactions, and running commands or obtaining information from Discord without a bot account. According to code security business Socket, the harmful bundle was contribut...