Search Unity

  1. We are migrating the Unity Forums to Unity Discussions. On July 12, the Unity Forums will become read-only.

    Please, do not make any changes to your username or email addresses at id.unity.com during this transition time.

    It's still possible to reply to existing private message conversations during the migration, but any new replies you post will be missing after the main migration is complete. We'll do our best to migrate these messages in a follow-up step.

    On July 15, Unity Discussions will become read-only until July 18, when the new design and the migrated forum contents will go live.


    Read our full announcement for more information and let us know if you have any questions.

Other Hub Hacked?

Discussion in 'Unity Hub' started by xxsmbr, Mar 16, 2022.

  1. xxsmbr

    xxsmbr

    Joined:
    Feb 4, 2021
    Posts:
    51
    Updated just now and got a random text file on my desktop called WITH-LOVE-FROM-AMERICA.txt
     
  2. PythagoRascal

    PythagoRascal

    Joined:
    Oct 25, 2012
    Posts:
    26
    This happened to me as well. From what I can piece together, it seems like it comes from this NPM package: https://github.com/RIAEvangelist/peacenotwar

    Either the Unity Hub or one of it's dependencies includes this package, which seems to copy this file to the Desktop. While I support the sentiment of the above package, I find it highly disturbing that it was added into the Unity Hub, knowingly or not, without explanation or permission.
     
    retired_unity_saga likes this.
  3. cspencerjr

    cspencerjr

    Joined:
    Oct 4, 2018
    Posts:
    1
    Same here, found it created it every time I ran Unity Hub. I have since uninstalled the Unity for now. I have had issues with identity theft before and this is not cool.
     
    retired_unity_saga likes this.
  4. Acissathar

    Acissathar

    Joined:
    Jun 24, 2011
    Posts:
    677
    Last edited: Mar 16, 2022
    retired_unity_saga likes this.
  5. retired_unity_saga

    retired_unity_saga

    Joined:
    Sep 17, 2016
    Posts:
    300
    Oh.......................

    Mmmmm......

    edit: yeah thats not cool

    gonna take me a unity break for a bit
     
  6. TrentSterling

    TrentSterling

    Joined:
    Jan 4, 2013
    Posts:
    99
    Thank god I never updated from hub 2.4.5 o_O
     
  7. NolanDarv

    NolanDarv

    Joined:
    Feb 11, 2022
    Posts:
    1
    So Unity is seriously updating their software without proofreading the code of the updated dependencies? So some almost random person can write some malicious S***-code on a stinky javascript that Unity uses as a dependency and it will end up running on my computer after Unity Hub update?

    Has the whole world gone completely cuckoo or what?
     
  8. jjejj87

    jjejj87

    Joined:
    Feb 2, 2013
    Posts:
    1,117
    Things can happen. And whilst this almost got me into a huge trouble, I dodged the bullet :)

    But yes, maybe giving more attention to security is something we all need to be aware of.
    This could have been a disaster.
     
  9. Xozyain

    Xozyain

    Joined:
    Jun 16, 2017
    Posts:
    10
    Thats all you need to know about UnityTech professional skills... Unbelievable!
     
    BackgroundMover likes this.