CVE-2025-23202

The CVE-2025-23202 entry concerns the Bible Module for ROBLOX. The vulnerable components are the FetchVerse and FetchPassage functions, which lack input validation, enabling injection attacks that could manipulate API request URLs and potentially lead to unauthorized access or data tampering. The...

Bible Module for ROBLOX 输入验证错误漏洞

Bible Module for ROBLOX is a module about the Bible by UnknownLua Personal Developer. It allows developers to easily access information from the Bible API software. An input validation error vulnerability exists in Bible Module for ROBLOX that stems from the FetchVerse and FetchPassage functions...

Malicious code in roblox.dll (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11436 Malicious code in roblox.dll (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious NPM Packages Target Roblox Users with Data-Stealing Malware

A new campaign has targeted the npm package repository with malicious JavaScript libraries that are designed to infect Roblox users with open-source stealer malware such as Skuld and Blank-Grabber. "This incident highlights the alarming ease with which threat actors can launch supply chain attack...

Malicious code in robloxbootstrapper (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in upgrade-roblox (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-10297 Malicious code in upgrade-roblox (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-9431 Malicious code in roblox-creator-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c24626261c9a2e163bb8ec1654a1b5afeb68caf4f82285bf05ebefcf94d414e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in roblox-creator-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c24626261c9a2e163bb8ec1654a1b5afeb68caf4f82285bf05ebefcf94d414e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in get-new-script-roblox-fishing-simulator-script-x5c6h7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d3935d85ffff584c274c803e27fe750e88812237d94029109b8e18bab26ab63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in updated-script-roblox-muscle-legends-script-e3lrsz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ac788b3c76120ad7eceab18dee69aa2e73ca9d9392f00677491e6ffba02340 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in get-new-script-roblox-bedwars-script-076bmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a943cd109acdf8945f8521c6aeda7ebbc895c1fcca206e2d2845e1971f48e93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9167 Malicious code in new-code-script-down-lo-ad-jjsploit-roblox-executor-fi7j8p (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ba7e29bf181a9fc2806a8929c4fbd604f9ac9bf7d14d4b59b0fdd97918b3194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9138 Malicious code in code-script-new-roblox-muscle-legends-script-tr9plv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 780f0af2802d39365386734610e4539ac7340ae349dd24768d304da50c560f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9182 Malicious code in script-updated-roblox-redwood-prison-reworked-script-c5bqbv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b78659fb6218288f54c62b3f447a830fb0280c0b956bf43c74841db5510e7955 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in code-script-new-roblox-muscle-legends-script-tr9plv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 780f0af2802d39365386734610e4539ac7340ae349dd24768d304da50c560f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9149 Malicious code in get-new-script-roblox-bedwars-script-076bmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a943cd109acdf8945f8521c6aeda7ebbc895c1fcca206e2d2845e1971f48e93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9150 Malicious code in get-new-script-roblox-fishing-simulator-script-x5c6h7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d3935d85ffff584c274c803e27fe750e88812237d94029109b8e18bab26ab63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9151 Malicious code in get-new-script-roblox-murder-mystery-2-h-a-c-k-script-87l2lf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dceef79eb5edb5022fd0ab761d5786442061cd22af13a908da5d0c3be177f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...