
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Node.js utility module for locating the install paths of Roblox Studio and Roblox Player.
* Currently rbxapp is only supported on Windows devices, and uses the registry to detect installation paths. Attempting to use locator functions on another platform will throw.
$ npm i rbxapp
const { RobloxStudio } = require("rbxapp")
const studio = new RobloxStudio()
(async () => {
try {
const paths = await studio.locate()
console.info(`Roblox Studio is installed at: ${paths.application}`)
} catch (error) {
console.error(error)
}
})()
The rbxapp module exports a RobloxStudio and a RobloxPlayer class, both of which are used to locate their respective applications.
Returns a Promise, which resolves with a StudioApplicationPaths object.
Type: boolean
Required: No
Default: true
Attempts to verify that all paths are present on the filesystem before returning. Will throw if any of the paths could not be found.
Returns a Promise, which resolves with a PlayerApplicationPaths object.
Type: boolean
Required: No
Default: true
Attempts to verify that all paths are present on the filesystem before returning. Will throw if any of the paths could not be found.
Type: object
| key | type | description |
|---|---|---|
| launcher | string | Path to RobloxStudioLauncherBeta.exe |
| application | string | Path to RobloxStudioBeta.exe |
| root | string | Path to version-{{hash}} directory (Studio parent directory) |
| content | string | Path to Studio's /content directory |
| plugins | string | Path to the /Plugins directory |
| appdata | string | Path to the Roblox AppData directory |
Type: object
The only difference is lack of plugins directory.
| key | type | description |
|---|---|---|
| launcher | string | Path to RobloxPlayerLauncherBeta.exe |
| application | string | Path to RobloxPlayerBeta.exe |
| root | string | Path to version-{{hash}} directory (Player parent directory) |
| content | string | Path to Player's /content directory |
| appdata | string | Path to the Roblox AppData directory |
FAQs
Fetches the install locations for the Roblox applications
We found that rbxapp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.