Overview

• The plugin exploited Dawntrail’s blacklist update flaw to harvest players’ unique account IDs for stalking and harassment.
• All plugin files have been erased from GitHub and other hosting platforms and the developer has stepped away from further mod development.
• Square Enix addressed the vulnerability in patch 7.2 but players quickly reversed the account-ID obfuscation, leaving exposure unmitigated.
• Users warn that other unauthorized tools and existing databases could continue to link alternate accounts until the underlying leak is patched.
• Creative director Naoki ‘Yoshi-P’ Yoshida says the team is working on a comprehensive fix and considering legal measures to safeguard player privacy.