Discord webhooks abused as stealthy C2/exfiltration in npm, PyPI and RubyGems packages (e.g., mysql-dumpdiscord) to steal configs. ASAP.
Threat Actors Weaponize Discord Webhooks for Command and Control with npm, PyPI, and Ruby Packages
Related articles