Hi Folks,
Tifa.FUTA.1.var and bamair1984 SS.var that were previously linked from this thread had near-identical code meant to delete files in typically-named VAM folders. Please avoid sharing these files or their links, because spreading the malware can only spread the pain.
If you know of other files with malicious code whose links were shared here, feel free to Report those posts.
In the meantime, please don't blindly trust downloads from anyone you don't know, especially new or light-posting users; at the very least, verify anything you download.
In this case, both of the above .var files were linked by users with very little history and/or very recent registrations - those involved appear to be bad actors and they had help from others. While we can clean up this recent situation, the community can also help to minimize future attacks by remaining diligent about checking for such possibilities.
Thanks for your consideration.
MeshedVR might consider a way to more explicitly make users aware of permissions that code wants to have - or at least ensure that sensitive actions, such as deleting VAM asset folder contents, requires a player's consent.