The Blocklive malware incident (2024)

This was a somewhat big deal in some Scratch community bubbles in May 2024, but there's very little documentation about it on the open internet. Felt reasonable to put something on this blog about that time Blocklive became malware. I'm also including some other security and privacy issues that were discovered at the same time. My reaction at the time to this was a bit emotional. I'll try to keep…