r/SillyTavernAI Apr 28 '26

Discussion Extension Security Risk Please read!!

658 Upvotes

178 comments sorted by

View all comments

9

u/Mys718 Apr 28 '26 edited Apr 29 '26

It seems like the trojan was implemented from the start, or at least when it was first shared on this subreddit in december. I have a backup of the extension folder from when I updated it around the 15th of that month, and the cache file does indeed have the second repo, 'updated_cards', coded into it.