Is this a malicous script?

I’ve checked the code that the script is required and nothing looks bad. If you are concerned about if this might be a virus or not, open up a completely separate place and test it there. If there is no malicious behavior then it looks like you are good. I was looking at the tags in the creator’s scripts and it looked like he only makes it require a module to help prevent people from stealing it and reuploading it. You might have just gotten lucky though. Like other people are saying, a lot of viruses will have

local key = 0000000000
require(key)

something like this in their code to hide/prevent the user to see what is actually being gotten.

Same here,
I’ve checked the source code, and there doesn’t seem to be anything definitively malicious about it.

However, I’d avoid using private modules like the plague unless they’re owned directly by you or by someone you trust (and I don’t mean that lightly). I’ve had people change source code on me without my approval or knowledge before, and it’s almost never pleasant. Granted, this happened back when closed-source modules were still around, but still.