To be perfectly clear, there is no security issue in the game itself any more. The problem that did is exist is that the game contained a key that (in fairly limited circumstances) could let someone acquire some level of access to your discord while pretending to be the dev.
Someone releasing an "infected" version of the game could:
Request a token with much broader permissions to your discord than the dev intended
Pretend that it is the dev asking for this level of access
Send the token acquired by the game elsewhere for nefarious purposes
You would have to say "Yes, I want to give the dev full access to my discord" when sent to discord to complete that side of the handshake. There is nothing in this game I have seen that would cause any problem so long as you never tried to do the discord auth thing. Honestly, it was most likely to negatively impact the dev's paying customers.
Its a engine change from from before to the SDK 8.4.(x), IIRC. But not sure why it would pop up again. Also if you do not use an update only you should not unpack the new version in the old folder.
Also the file that needs to be deleted is the rpy and rpyc IIRC.
