Join the Left 4 Dead 2 Discord server below:

TLDR: Those 3 addons contain malicious code. Report them, inform other players about it and unsubscribe from them.

Hello there, survivors out there in the wild!

Recently it has come to our attention that there are 3 addons in the workshop containing a malicious code.
The mentioned addons are:
- Better Weapons Sounds (ONLY MELEES)
- Better Weapons Sounds.
- Better Lighting
Those addons' author is Fantico404.

Those addons contain files[prnt.sc], from one of the addons mentioned, that contain a code which purpose is to crack the user's credentials and to send the data to an encrypted address. (This code is found in a popular GitHub password cracking repository, which also can be used as evidence on this claim.)
edit: some players have reassured that the game doesn't run the code, so there's no need to worry about it; however, the author is known for stealing content from other creators and blocking the users when confronted and it's still not appropriate for addons to contain that type of stuff as we don't know the author's intentions.
This file[prnt.sc], as you can see, contains code that, according to ChatGPT[prnt.sc] (for better evidence, check the link): "The context in which this code is used would determine its specific purpose and whether it is being used for legitimate or potentially malicious activities..";
This one[prnt.sc], which the author claims it's for adding reverb and echo effects[prnt.sc], is meant to adjust the password cracking configuration[prnt.sc];
This[prnt.sc]seems to be a connection-related code[prnt.sc];
Finally, this[prnt.sc] one is the main[prnt.sc] password cracking code. Codes like those work by testing every single combination of symbols of a password until they get it right.

We realized that this author is also actively deleting comments and blocking users who complain about this matter, and after further research, we also found out that this user is also registered on a popular cracking/hacking forum, to which they have contributed with about 600K users' credentials from many platforms.
This information along with the presence of the malicious code in a few of the author's addons means that they can not be trusted at all and people should report and unsubscribe immediately from their addons.

I've included parts of the code on the screenshots to be used as evidence and not to incite to the use of it, also by those examples you can spot other addons that might include the same type of code.
Generally, addons that are meant to improve media files, and others, do not need any scripts/code, only the .wav or .png files (for example), so remain alert when it contains code like these addons.

I've decided to post this here in the Steam group to reach more players, as the addons contain a small yet significant amount of subscribers, which is alarming.

Now you might wonder, Why should I care about this? You could be the one who has any of those addons subscribed to and you could be the one having your credentials leaked across the Internet, so that should be a good reason to care about this and spreading the word to contribute to a safer Workshop.

Why should I trust you? If you still don't believe after all the evidence posted, see it with your own eyes (I wouldn't recommend this. If you still want it, proceed at your own risk). Do not subscribe to the addon as you will have to run the game in order to have it installed, instead, search for "Steam Workshop Downloader" on the Internet in order to download the addon and then use GFCScape[gamebanana.com] to analyze it.

Why would you use ChatGPT to support your evidence since it can generate false information? For those who aren't experienced with coding, it will be hard to understand what each part of the code means, so that's the only quick and good way to prove a point and explain it.

You can still safely browse the Workshop and subscribe to the addons you want as cases like those are rare and most of the times they are detected and deleted. Unfortunately, as you can see, it can happen that they aren't detected, so we suggest you to investigate the addon files with GFCScape when it's a fairly recent and unpopular addon (this obviously doesn't mean popular addons are always 100% safe!).

With all of this being said, please, spread the message and report those addons along with the author so we can work together to contribute to a safer community and workshop. We cannot be 100% sure that the code actually works and that the users who subscribed to it have their credentials exposed already, but it's better to be safe than sorry.

I'll go ahead and create a special place on the group discussions so we, players, can flag other addons that may contain malicious/suspicious codes, so the rest of the players can remain aware and be careful.

If you still have any question about it, feel free to join our Discord server[www.discord.gg].

(I'd like to thank WinterNightST for informing us about those addons.)

Anything for a safer community.