Malicious npm packages are stealing Discord tokens

JFrog researchers found 17 malicious packages that intentionally seek to attack and steal a user's site credentials.