# sonatype-2020-1097

discord.dll - Malicious Package ("fallguys" successor)

Published Nov 9, 2020

[blog.sonatype.com](https://blog.sonatype.com/discord.dll-successor-to-npm-fallguys-) [help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) [OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-18479.json)

CVSS ScoreCritical

10.0

### Security Details

**CVE ID** sonatype-2020-1097  
**CWE** N/A  
**CVE Description** discord.dll - Malicious Package ("fallguys" successor)  
**Published** Nov 9, 2020

### CVSS Score & Severity

10.0 Critical  
**CVSS Vector** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score** 0%  
**Malware** malware

**KEV Status**  
Not in KEV Catalog: No known exploits

### Affected Ecosystems

Source Sonatype

### References

[blog.sonatype.com](https://blog.sonatype.com/discord.dll-successor-to-npm-fallguys- "https://blog.sonatype.com/discord.dll-successor-to-npm-fallguys-") THIRD_PARTY  
[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html") THIRD_PARTY  
[OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-18479.json "https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2025-18479.json") THIRD_PARTY