Is this add-on a trojan?

Anki Extra Stats - AnkiWeb when I look at the code I don’t see much that doesn’t look suspicious - there’s a connection to discord to run something from there that in the code is called a “Webhook”.

6 Likes

Yeah, it’s malicious. I think the addon grabs your discord token from your system and posts it into their discord server.

You can see similar code from here: pyDiscordGrabber/Discord.py at master · Bainky/pyDiscordGrabber · GitHub

3 Likes

+1

Pinging @dae.

1 Like

Thanks for the heads up, I’ve taken it down.

5 Likes