Downloads for several trending scripts highly suspiscious

[adamlui]

https://scriptcat.org/en/script-show-page/72

https://scriptcat.org/en/script-show-page/1027

(but don't ensnare honest authors!)

[CodFrm]

Yes, these are all abnormal data. The data across the entire site is currently inflated. It feels like someone is artificially boosting the data for the whole website.

[adamlui]

Look at #48 (comment)

You can try testing with another browser, or open the install link in private/incognito mode. That should be treated as a different device for testing.

If that is true they can just create incognito session over and over again

[CodFrm]

Look at #48 (comment)

You can try testing with another browser, or open the install link in private/incognito mode. That should be treated as a different device for testing.

If that is true they can just create incognito session over and over again

This isn’t limited to private/incognito sessions—attackers may also use proxy IPs to manipulate the numbers.
The currently displayed data is for reference only. Suspicious records will be filtered out during the cleanup process before the data is used for rankings or score calculations, so no changes are needed for this issue at the moment.

[adamlui]

update TOS to prohibit inauthentic activity, then warn the authors of scripts w/ suspicious activity in English + Chinese, see how they respond (or if activity stops)

Dear <fullname|username>,

Your account has been identified as being involved in inauthentic activity, in direct violation of ScriptCat.org TOS code.

Should such activity persist, more punitive actions may be taken against your account.

If you believe this e-mail was sent to you in error, please respond immediately with your reasoning to avoid unnecessary account restrictions.

Terms of site use may be reviewed here: https://scriptcat.org/terms-of-service

Sincerely,
ScriptCat.org Anti-Abuse Team

[adamlui]

(i will give further instruction based on results)

[CodFrm]

However, this currently does not seem to be limited to just these two scripts. The entire website appears to have been affected. It may be a targeted attack against ScriptCat, or simply malicious disruption.

I have been monitoring these IPs and the related data on the backend.

[CodFrm]

Currently, it only makes the numbers shown to users look relatively high. In scenarios where the data is used for ranking or score calculation, these abnormal values are filtered out, so I haven’t paid too much attention to it.

[adamlui]

Apply that same filter to downloads count too

[CodFrm]

Apply that same filter to downloads count too

No, that would bring back the issues mentioned in #48 again. Let’s keep it as it is for now.

[adamlui]

You're not gonna even warn them??

[CodFrm]

You're not gonna even warn them??

It wouldn’t help. I contacted one of the two script authors a while ago, and they were completely unaware of it.