Union hiding scripts

Hello, I inserted a union from the toolbox and by separating it I found out that it had virus scripts in it, I was wondering if a normal union is able to enable scripts hidden within it.

This is the union with the virus scripts I found, the model is from 2014, I don’t think it affected my game at all but be warned still:

1 Like

That depends on its run context a lot.
You sure scripts appeared after separation?

EDIT:

I just tested that and no they do not run when unioned

You just found a potential exploit/vulnerability; Make sure to file a report Bug Reports
image

image

It’s not a bug. The Union process simply destroys the old parts, thus the script. Based on how unioned parts are serialized, the script simply gets recreated once the union is separated. This is another reason why unions are bad, more data to load.

3 Likes

I just looked a little bit into the author of the model. Funnily enough, this account seems to belong to a YouTuber with over 200,000 subscribers. There is also another channel that is way older with videos from 17 years ago, showing a man married to his wife and a video about “Funny kids” in which kids are shown laughing. kinda eerie. His active youtube channel also has older videos with Roblox gameplay footage, confirming these probably are all his accounts. And yes the 200k+ youtube channel still uploads few times a month.

Gives me an off feeling, knowing that at the time this dude made the virus free model he was probably 30 or something, trying to backdoor other peoples games. He has countless free models under his name, some stolen, some I don’t know the origin of. Furthermore, the model you have linked only contains a singular Union and no scripts. I can’t seem to find the model you have inserted.

Thought this might be some additional and useful information.