Snyk has a published code exploit for this vulnerability.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsAvoid using all malicious instances of the colors_express
package.
colors_express is a malicious package. This package uses "typosquatting" to bait unaware users to install it. This package contains a Discord info-stealing malware code that iterates over local storage folders of common browsers (Chrome, Opera, Brave, Yandex) and Discord-specific folders.