Malicious code in generator-roblox-robux-unlimited-codes-dkdedz (npm)

The package generator-roblox-robux-unlimited-codes-dkdedz was found to contain malicious code...

MAL-2025-45898 Malicious code in roblox-robux-code-generator-2023-ddkdkdzd (npm)

The package roblox-robux-code-generator-2023-ddkdkdzd was found to contain malicious code...

MAL-2025-45899 Malicious code in roblox-robux-generator-2023-dkzkkdd (npm)

The package roblox-robux-generator-2023-dkzkkdd was found to contain malicious code...

Malicious code in updated-tricks-roblox-robux-generator-dkzskzk (npm)

The package updated-tricks-roblox-robux-generator-dkzskzk was found to contain malicious code...

MAL-2025-44389 Malicious code in generator-roblox-robux-unlimited-codes-dkdedz (npm)

The package generator-roblox-robux-unlimited-codes-dkdedz was found to contain malicious code...

Malicious code in wicked-external-roblox (npm)

The package wicked-external-roblox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-39264 Malicious code in wicked-external-roblox (npm)

The package wicked-external-roblox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in solara-roblox (npm)

The package solara-roblox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-37903 Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_wrhzdu (npm)

The package updated-tricks-roblox-robux-generator-2023-get-verifywrhzdu was found to contain malicious code...

MAL-2025-33627 Malicious code in solara-roblox (npm)

The package solara-roblox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_wrhzdu (npm)

The package updated-tricks-roblox-robux-generator-2023-get-verifywrhzdu was found to contain malicious code...

Age verification: Child protection or privacy risk?

With governments demanding actual age verification on websites with adult content, and platforms like social media and Roblox introducing restrictions based on a user’s age, the controversy about different types of age verification and their implications is growing. Last week, Roblox announced ne...

Roblox Lawsuit Claims Hidden Tracking Used to Monetize Kids Data

Roblox hit with class action over alleged secret tracking of kids' data; lawsuit claims privacy law violations and…...

Malicious code in hyper-request (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6431cc277fd1d8f82ec5160b5943d5ee9ec08ca1a5c5ff9b1b45d67c233b1d2 The only functionality is to exfiltrated Roblox cookies. However, the current version does not contain the webhook url yet see reqhandler.py --- Category:...

MAL-2025-191763 Malicious code in hyper-request (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6431cc277fd1d8f82ec5160b5943d5ee9ec08ca1a5c5ff9b1b45d67c233b1d2 The only functionality is to exfiltrated Roblox cookies. However, the current version does not contain the webhook url yet see reqhandler.py --- Category:...

A week in security (March 10 – March 16)

Last week on Malwarebytes Labs: Research on iOS apps shows widespread exposure of secrets Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO Update your iPhone now: Apple patches vulnerability used in "extremely sophisticated attacks" The dark side of sports betting: How...

Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO

In response to growing worries about the safety of children using Roblox, the CEO of the company has said to parents: "My first message would be, if you're not comfortable, don't let your kids be on Roblox." Roblox is one of the most popular gaming platforms, especially among young children...

A week in security (February 24 – March 2)

Last week on Malwarebytes Labs: Millions of stalkerware users exposed again PayPal’s "no-code checkout" abused by scammers Countries and companies are fighting at the expense of our data privacy Roblox called "real-life nightmare for children" as Roblox and Discord sued Android happy to check you...

Roblox called “real-life nightmare for children” as Roblox and Discord sued

Last week it was reported that a lawsuit has been initiated against gaming giant Roblox and leading messaging platform Discord. The court action—charging them with the facilitation of child predators and misleading parents into believing the platforms are safe to use for their children—centers...

CVE-2024-31442

Redon Hub is a Roblox Product Delivery Bot, also known as a Hub. In all hubs before version 1.0.2, all commands are capable of being ran by all users, including admin commands. This allows users to receive products for free and delete/create/update products/tags/etc. The only non-affected command...