Go to https://muffin.ink/blog/scratch-vulnerability-disclosure
Don't worry this is not a virus it just uses ACE or arbitrary code execution. Ace can also be used to get to the credits or bowser's fight in super Mario world from the yoshi's island 2 level LOL