lol
lmfao
CC in Sims 3 was prone to bugs that would corrupt your game AND all the CC that you had installed, like the Girl Doll Dressed and Horse Body CC.
Custom content for The Sims was notoriously buggy, as were the games themselves (TS2 was also susceptible to corruption), but EA has outdone themselves and now Sims 4 CC is prone to ACTUAL FUCKING MALICIOUS RCE EXPLOITS.
Seriously, how fucking hard is it to make a custom content system that is properly sandboxed so shit like this cannot happen in the first place? Or at the very least limit the amount of shit you can do with the code. It looks like .ts4script files are just pure Python code with no restriction on what the code can do, so you can do fucking filesystem operations through a Sims 4 mod. This is incredibly incompetent and EA has no excuse like Minecraft mods where everything is Java code. They could've used Lua, they could've done anything to avoid this from happening, but they didn't.
This is pretty simple code, and Python is a simple language, so even though I can't code in Python for shit I can see what it's doing. First it imports libraries needed to run the malicious code and keep it hidden away in a primitive way, by making it all temporary so it'll delete itself when it's done and so that it runs hidden. Then it sets up a temporary Batch file which it populates with four basic commands, a useless echo command, a curl command which downloads the actual payload, runs it then quits. Then the Python script runs the batch script hidden so it does all of it without being seen.
This is a very fucking primitive attack, and all that had to be done to stop this from happening is to restrict Sims 4's Python from using libraries that can run executables and do anything that it doesn't need to do for a fucking Sims 4 mod.
Also it's nice that Discord also acts as a benevolent host of malicious software through it's attachment system that has zero user access control, and they take zero precautions to fight it. Wouldn't be surprised if nonces also use it to distribute child porn that way with Discord doing fuck all to stop them. Make a server with no one in it, attach a shitton of illegal material in it and distribute the Discord CDN links.