This based off a real story that happened this month. 3 bots started commenting "how to hack scratch accounts" with links to scratch projects wit a tutorial that it only told you to give your permissions, token and session id from scratch using an cookie editor extension. luckly various users including me. reported the comments and accounts and projects. the projects were reuploaded but got taken down. i dont know if accounts got hacked but many featured projects had to close the comment section because of the amount of spam from the bots
