Roblox developers are losing entire games to malware attacks

Attackers targeted Roblox developers by posing as recruiters on Discord and persuading victims to install a malicious Python package named “robase”; the package acted as an infostealer that stole authenticated browser/Discord sessions and allowed attackers to take over developer accounts, games, and in-platform currency. Multiple developers lost control of games and Robux, experienced difficulty recovering assets through Roblox support, and the report includes defensive guidance such as avoiding unsolicited installers, testing untrusted software in isolated environments, monitoring active sessions, enabling platform protections, documenting incidents, and using real-time anti-malware.