Every time I work on a game that has a team of about 6 people, I discover there are always several new malicious scripts inserted in different places. From my understanding, it is impossible for these scripts to appear from in-game scripts since those only run when the game is played, so I assume it is from a plugin.
I have been able to find that it probably comes from a fake uiDesign Plus plugin, but some of the developers’ inventories are private and it could also take an incredibly long time to check every single person’s plugins.
I have tried searching for scripts that include ‘require’ and ‘fenv’ with all hidden objects shown, but Roblox’s module scripts also use require so it is probably just getting buried if there are any. The only pattern it seems to have is that it is usually buried under animations or inside value objects inside dummies and NPCS.
Is it possible to check the creation date and source of these scripts? How could I quickly and efficiently check everyone’s plugins?
Screenshots:
