Read the original article: Npm package caught stealing sensitive Discord and browser files
Malicious code was found hidden inside a JavaScript library named Discord.dll.
Read the original article: Npm package caught stealing sensitive Discord and browser files