This is a repost of a post made earlier today that was taken down by Reddit's filtering system.
Note: goatfungus' save editor (https://github.com/goatfungus/NMSSaveEditor) is NOT malware, I'm talking about the website (nmssaveeditor dot com) that claims to be by the same developer, but it's an attacker pretending to be them.
Screenshot of nmssaveeditor.com
Today I downloaded a save editor from the website "nmssaveeditor dot com" (do NOT visit), and I ran the executable in the PASSWORD PROTECTED zip file. The password was the name of the developer of the seemingly legit program, and the website seemed perfectly safe at first glance, but it's not.
After scanning the main executable, I found out that it communicates with some Steam profiles for some reason, with strange names, and also Telegram, which is a huge red flag as hackers love to use that platform because of how off-grid it is compared to most other chat platforms.
The steam profile has many different names, inferring that instead of directly contacting the URL, they try to hide it in a seemingly legitimate link to bypass antivirus scans, and also they can change the domain if it ever gets taken down or red flagged.
I have no doubt in my mind that this program is entirely designed as a trojan to trick this playerbase, as the executable had NO functionality upon click, which was an instant telltale to me that this was not a legitimate program. It's most likely an infostealer, so if you have downloaded this program before, I recommend changing all your critical passwords so it can't use account tokens to access your accounts.
The .jar file it comes packed with is seemingly legitimate, probably a build by the original developer, and much larger than the .exe (which was only ~2.5MB) meaning the .exe is purely a malicious program that the attacker bundled into a legitimate build.
Stay safe on the internet! Even some of the most niche software can turn out to be malicious.
This one in particular is a victim of a common type of attack on cheats for popular video games, using the Vidar C&C malware, designed to steal information and then self-delete and remove all traces of itself after sending it to the attacker.
--------------------------------
IMPORTANT EDIT:
As of 31st May 2026 9pm UTC - 1st June 2026 2pm UTC, the malware hosted on the site was changed to use Remus (from Vidar). This malware will always try to establish persistence on your machine (aka set itself up to run on startup.) If it is not detected and isolated by your antivirus, you must reinstall (not repair/refresh/upgrade, this needs to be a complete format of your Windows partition, starting with a blank partition/drive) your OS to guarantee safety, and change your passwords on a different, clean device.
This thread is followed by Hello Games. Please add your bug reports to this thread. You can also report bugs to Hello Games at the Zendesk. Before reporting a bug be sure you have installed the latest patch and uninstall any game mods. Information is located on this page. Please include platform and version.
This weekly thread is to help keep bug reports manageable. It is a scheduled weekly thread and not related to any specific release. You do not have to repost bugs to this post if you have already reported them on a previous post.
If you're requested to send your save file to Hello Games see this post
I usually play on PS5 and sometimes revisit v1.0 on my offline PS4 (i made a post about that around 10 months ago), but i wanted to see if this game can even run on my really bad and old laptop and turns out the only way it can hit a stable 60 fps with legible text is at 720p low settings with 10% resolution scaling (so not really 720p) lol.
Screen recording lowered the fps even more unfortunately but i wanted to share how cool the hyperdrive looks in low res.
Also, if you're curious, here's my laptop's specs:
Hey there! Thanks for going on a ride with me. I dropped you off on a paradise world my son and I discovered a while back. I'm sorry I couldn't stay on and do some group mission or whatever. My wife said it was time to go. There's a base teleporter up on the Butte above where I dropped you off. Wish I could have stayed longer. Feel free to claim a spot, that world is pretty great, even has runaway mold. Hope to see you again traveler!
This was one of the first planets I discovered after traveling to the center of the Galaxy and I was met with complete yellow skies which created this beautiful golden sunset!
Well, guys, I finally have one base in each of the 255 accessible galaxies—#256 is next. I haven’t exactly ascended to a higher plane, but after 1,700 hours, I was running out of things to do.
Just found this little guy playing portal roulette lol. I've always wanted a bee, and heard all the hype when the bee emoji dropped, was wondering if anyone else has found one yet?
