To work, these tools require your Discord Account Token . If the software is malicious, the developer can instantly take over your account, change your email/password, and bypass 2FA.
They often require an "Alt" account token to run, allowing you to "snipe" codes on one account and potentially redeem them on another to protect your main profile from detection. Popular GitHub Project Types
These scripts typically work by scanning incoming message data for strings that match the pattern of a Discord gift link ( discord.gift/).