Search for “\1” or something similar using ctrl shift f. (Or actually search for “getfenv”) Disabling third party sales is a bandaid, if it is a require virus which it likely is then it exposes your game to have the virus change to something else if they update the module it is requiring (however unlikely). If you see something like getfenv()[("\118".."\97"…):reverse()](…)
(or anythint remotely similar) then it’s definitely a virus.