A new threat to Roblox players comes in the form of a malicious impersonator of official Noblox.js and Noblox.js open-source downloads.
Noblox.js is an open-source Roblox API wrapper written in JavaScript that interacts with the game’s website.
Seeing 1,642 weekly downloads, this is one of Roblox’s most popular third-party node packet manager (NPM) downloads.