CVE-2017-16207

EUVD-2018-0398
discordi.js is a malicious module based on the discord.js library that exfiltrates login tokens to pastebin.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
discordi.js_projectdiscordi.js
0.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://nodesecurity.io/advisories/545
https://nodesecurity.io/advisories/545