While testing the welcome message, I had a dummy account joining and leaving the Discord server, and wasn’t able to trigger a welcome message for a long time.

A malicious package named 'pycord-self' on the Python package index (PyPI) targets Discord developers to steal authentication tokens and plant a backdoor for remote control over the system.