Malicious NPM package disguises itself to steal Roblox data – ReadWrite

A new threat to Roblox players comes in the form of a malicious impersonator of official Noblox.js and Noblox.js open-source downloads.
View full source