Werid possbile plugin backdoor

Recently while I was find and replacing I noticed several scripts and objects were in HTTPservice, odd I know since you cant place + they were obfuscated

I opened 3 other places to confirm this wasent another dev who had it.

The thing is I only run like 8 plugins

A couple of plugins

image

Anyone know the cause of this

I had the same happen a couple of years ago, and it stopped after uninstalling a batch of plugins i had.
So, in your case it probably is a plugin causing that, make sure you check for the authors of plugins and look for community feedback on them when installing them.

Ive checked each one, they all are reliable

Its one of the plugins dont know what one but

for _, item in game:GetService("HttpService"):GetChildren() do
	item:Destroy()
end

if you ever find a similar backdoor you can run this and uninstall all plugins

Hey there! You mentioned that you already validated the credibility of your plugins’ authors. You can take a look at the source code of plugins that you may have a suspicion about with the following command:

game:GetService("InsertService"):LoadAsset([plugin-assetId-here]).Parent = workspace
2 Likes

Will try this out today.

(joly season)

1 Like