1. Roblox devs: check your Studio plugins. Found one I installed months ago still quietly phoning home every time I open Studio 🧵

2. It's the ForgeAI "AI game builder" plugin. I decompiled it: on launch it reconnects with a saved key, then uploads your full place, every script's source included, to http://forge.loopmobile.io every ~8 seconds.

3. It also forwards your Output errors, and their server can send it commands: create/edit/delete scripts, insert models, even clear_scene. All AI builder plugins work kind of like this, but this one keeps going in the background long after you stop using it.

4. Not saying it's malware, I didn't find cookie theft or backdoors. But your code is sitting on someone else's server. If you're done with a tool like this: uninstall it, revoke the key, and ask them to delete your data.

Malware..? Not really.. Weird? In my opinion I would say so but what do I know.. I Just tweet nonsense

#RobloxDevs #roblox
#robloxugc