I’ve already researched this topic today and a common issue is having a malicious plugin. I uninstalled all of my plugins and the problem is still present.
I have also tried doing (Command+Shift+F) to pull up the search bar. I have searched up about 20 different things including “require” and “PromptPurchase”
There are no free scripts in my game, and additional to that, the game was working fine yesterday and it wasn’t updated anytime after that before the problem game.
No one has access to my game, team create is turned off so there’s no way someone could have done anything to the game over night. I’m thinking possible a plugin inserted a script into a model or something. I have a pretty large game but I looked through pretty much all of the scripts and saw nothing.
Additional Info: I do have the assetID to the gamepass that is being prompted, but searching it was no luck.
It’s probably from a private module. Private modules can be updated remotely by the owner. They can also use datastores to activate themselves later. They can also be activated in game.
Press Ctrl + Shift + F and search require and if you don’t find anything getfenv.
The script using the private module can also be created by a plugin. I’d recommend double checking yours to make sure they’re not copies. Plugins can add scripts while you aren’t looking. It’s also entirely possible that the malicious code isn’t inside a private module.
I’ve had this issue. These will most likely be backdoors, and you could get those by using free models. I would suggest doing what @PseudoPerson said, use Ctrl+Shift+F to look throughout your game. They can be hidden really well.
Turn off third-party-sales. It will deny the sale from being prompted unless you use third-party shirts for you, it won’t work. Go look into your plugins and disable the ones you don’t trust, then look through your scripts and see if you see anything malicious.
This thing is a backdoor and it basically ruins the experience for players, I would suggest using RoDefender for this.
Also, if you can’t find it in your scripts, it’s probably a plugin issue. Disable some of your plugins, and if all else fails, disable all your plugins and uninstall the ones you don’t trust. You probably got a botted plugin, check the usernames of the plugin creator for more help.