It’s a lot of plugins. I’m going to remove them soon though. I am starting to suspect Low Poly Terrain Maker (the icon with the green island…) as the developer doesn’t match the one I saw on the website, so it might be a malicious duplicate.
That is Luraph obfuscation. AKA, exploit. Disable every single one of your plugins. Restart Studio. Remove the script. Enable a plugin and reload the place with each plugin. Once that script appears again, blast the offending plugin into orbit and report it. Keep going until you’ve gone through all of your plugins, there may be more than one.
This is tedious but it’s the only way to be sure.
Additionally you should go to ServerScriptService and DISABLE loadstring, once all of your plugins have been confirmed to not contain the malicious code.
The reason you restart the place after every plugin uninstall is because plugins can install code in Studio that persists even after it’s uninstalled. But no, places on their own cannot run code in Edit mode, it has to be a plugin. And once you reload the place, no code persists from the old place.
Is there a way I can know if the plugin has put a hidden malicious script. I’ve heard of scripts not showing up but still being there. Would this tutorial be a good place to start if I notice weird things in my game? Clearing your game of malicious scripts, plugins, and backdoors
You know where the script is (ServerScriptService). Add plugins one by one so you know which one is inserting the script into ServerScriptService. Follow the instructions correctly and you will find the culprit.
That tutorial would be a good place to start if you still think your place is infected after removing the malicious plugin.
Thanks, apparently it’s a copy of a low poly terrain generator made by a different user. I actually think that is the exploit, so I’ll try to see if it’s causing the script to re-appear
This is very annoying if it happens, a backdoor virus. i had to check every part in my game and find some scripts that were called Welding and debounce. After deleting those scripts i got rid of it. Ofc i uninstalled all plugins also.
Not necessarily, but you could obfuscate your scripts to make it harder to understand what they’re doing since people will need to dump constants and all.
It only has a bad reputation here because people use obfuscation techniques to make malicious code harder to decipher.
Ah, Thank you. Because in the fire alarm community, people spend months making things, and you just get those awful people who just edit the scripts and say they made it. Thanks
