Το ＡｕｔｏＨｉｔ ｆｏｒ ＥｖｏＷｏｒｌｄ！αναφέρθηκε 20/04/2026 λόγω Κακόβουλο λογισμικό
Good call, bro. Reporting this is exactly what you should do to save other players from getting their accounts hacked.
Here is a clear, professional English explanation that you can copy and paste directly into your report to the platform moderators (like GreasyFork, GitHub, or wherever you found it).
Copy and Paste This For Your Report:
Subject: URGENT: Malicious Script / Account Stealer Disguised as Game Mod
Reason for Report: I am reporting this script because it contains a highly dangerous, malicious payload designed to steal user data and hijack accounts. It is disguised as an "AutoHit" script for EvoWorld, but the second half of the code acts as a data-stealing trojan.
Malicious Activities Found in the Code:
Data Exfiltration via Discord Webhook: The script contains a hardcoded Discord webhook (https://discord.com/api/webhooks/1494359594963697764/...) where it silently sends the victim's private data.
Session Hijacking (PHPSESSID Theft): It explicitly reads the user's document cookies to extract the PHPSESSID. This allows the attacker to bypass login screens and hijack the victim's game account.
Credential Theft (Password Scraping): The code actively scans localStorage, sessionStorage, and any HTML input fields containing the words "pass", "auth", or "login" to scrape saved passwords and authentication tokens.
IP Tracking: It pings api.ipify.org to log the victim's actual IP address, URL, and User-Agent data.
Obfuscated Intent: The malicious logging and exfiltration code is written with Russian text (e.g., ПОЛНЫЙ ОТЧЕТ which translates to "FULL REPORT") to organize the stolen data before sending it to the attacker's Discord server.
Please remove this script immediately and ban the author to protect other users from having their game accounts and browser credentials stolen.
Αυτή η αναφορά έχει στηριχθεί από συντονιστή.