For all your Scratch users out there, I’ve got urgent news. Scratch user ilhp10, creator of BlockLive, has added malware to it that turns your account into a follow bot. Multiple users have already been made to follow him. In addition, he has been logging all BL chat messages to a Discord server.
Uninstall and report this addon immediately!!!
comments (single view)
the code was removed https://github.com/BlockliveScratch/Blocklive/commit/82968f873d8b812f334184b0e65a1da1a628ef65 (still not good though)
Very suspicious… I would still recommend reporting the addon, though.
the code was removed via a PR (pull request) from someone that didn't make the addon.
Why did another user do that? And did the creator have to confirm the change?
the other user did that because I'm guessing they didn't want the follow bot in the extension. the creator didn't have to approve it because I'm assuming the person to merge it was a maintainer.