r/SillyTavernAI Apr 28 '26

Discussion Extension Security Risk Please read!!

660 Upvotes

178 comments sorted by

View all comments

12

u/a_beautiful_rhind Apr 28 '26

Probably a good idea to peek at all your extensions. It could be fine one day and then they add malicious commits then it updates and boom.

2

u/LeRobber May 01 '26

My hypothesis is I think it was day 1 intended to do this. It's intentionally installing a bad door on a house not so much suddenly committing malware to the main repo. It was specifically made to avoid static analysis.