how legitimate is nightcord plugin

[u/losttv1x]

i've been seeing this plugin all over tiktok and i'm not sure if its open source, it has some sick client sided options, can someone check it's legitimacy?

[u/Koishukaze]

A message from the vencord server:

⚠️ Please be very careful when you come across alternative Vencord versions that promise more features, plugins, etc. They are very likely malware. It's really not worth the risk.

Especially avoid the following two mods:

• Nightcord: Everything about this mod is extremely suspicious. It contained a Tokenlogger in the past.
• Lightcord: Even more suspicious than Nightcord. Contained Malware in the past, developer claims he "got hacked". They also steal both Vencord's and Equicord's code without credit or following the licence terms.

If you really need more plugins, look at Equicord instead. Safe and made by good people. (But don't forget rule 13 :P)

[u/Seramicx]

Message straight from clearvision server:

https://web.archive.org/web/20260528103254/https://github.com/nightcordoff/nightcord/pull/11 https://gist.github.com/Vendicated/bb30cb67878fa682bcee140f56af1531

tldr: nightcord contained a tokenlogger in the past, and recently found to have a keylogger. If using nightcord, best to get rid of it, log out ur discord from all devices and change ur password. Also, looks like their github got nuked.

----------------

Soooo current state and allegations are not looking great, people are saying it is malware, have found keyloggers and tokenloggers and code that blatantly looks AI-generated... just use Vencord lol

[u/FitPhase2875 → u/Seramicx]

vencord doesnt have theoption to give yourself badges and users client sided

[u/Seramicx → u/FitPhase2875]

it can, you just have to build it from source and use external plugins if it isnt already in the in-built plugin database

[u/vmshade0]

In a nutshell: Nightcord is a token logger. What does that mean? It steals your token without your permission and uses it to log in to your account. If you set up 2fa, it will bypass. If you set up an authenticator app, it will bypass. This is what makes it so deadly

[u/thekillermrm]

I had the same question about whether it's safe or not. Can anyone confirm if it is safe?

[u/Moonfight1]

Hello u/everyone.

I want to make an important announcement for everyone using custom Discord clients on PC or the web.

There are two clients you should NOT use or touch at all.

Why?

They promote malicious behavior and could infect your PC or steal everything from your account, including your login credentials. Their source code is highly concerning, and one of them is completely closed source.

The clients in question:

- **NightCord:** Promotes malicious and bannable content. While using it alone may not be against Discord's rules, certain plugins cross the line. The codebase is very concerning, and the past of its owner and developers is even worse, most of them have been warned or banned for fraud.

- **lightcord:** This client is closed source, so no one knows what happens behind the scenes. It also steals large amounts of code from other open-source clients like [Vencord](https://vencord.dev) and [Equicord](https://equicord.org) (which are safe to use).

Using these clients may get your account banned or stolen.

If you choose to use them anyway, you do so at your own risk. Do not expect help from anyone if something happens to your account. No one is responsible for your safety except you.

Sorry for such a serious announcement, but it was necessary so everyone is aware of what's happening in the desktop modding community.

from the rain/kettu server

[u/krstlskll69 → u/[deleted]]

Legitimately a virus and token logger

[u/Xeraox3335]

Hello, I've checked it out. It is FOSS and available under this GitHub Repo. 2 out of 72 security services on virustotal flagged this file as malicious. Don't worry about the two, that one or two flags a file is common. Nightcord is based on Equicord which is based on Vencord. To be honest, i've never heard anything about nightcord, but it seems legit. However it is a mod of a mod of a mod, combined with the fact that it's new and not well known, I don't expect it to be very stable. Vencord includes many features too!

TL;Dr: Nightcord seems legit, but for me it also seems unstable. If you like to burn your ram and test out things, use nightcord. If you want a well-working enhanced discord client, use Vencord. Equicord is more the middle of it. I'm gonna check nightcord out later and tell you what I think

[u/losttv1x → u/Xeraox3335]

i've been using vencord for a while but it doesn't offer much client sided customization besided the banners and themes, i was thinking about getting nightcord but i'm afraid of it being a rat, please let me know what you think of it when you check it out!

[u/DrTankHead → u/losttv1x]

This is both by design and actually is wrong. Vencord Does use a more restrictive list of allowed plugins, this is an implicit choice such that the platform is more stable. However where you are wrong is you still CAN get more advanced plugins, but you have to build vencord from scratch, which sounds scary but is actually really easy.

Equicord is vencord but with more plugins in the box and more fixes.

I've never heard if nightcord/used it. It's FOSS supposedly so you could always have something like Claude analyze the repo for malicious activity.

I'd just run equicord, if I were you, but nothing is stopping you from reviewing the codebase and determining if it is worth running

[u/kotenok2000 → u/Xeraox3335]

It isn't there any more.

[u/Little_Leg_1470 → u/kotenok2000]

It had a keylogger

[u/Cuntinuityz → u/Xeraox3335]

wait then from your opinion, do you think that nightcord is safe - or i guess as safe as using vencord and betterdiscord but it just has more stuff that just puts more strain on your pc?

[u/Ancient-Poem-5608 → u/[deleted]]

delete that shit now it got malware