The storm-client.net shop advertises "premium" Allure plugins across weekly and monthly subscription tiers. When we decompiled those plugins, we found code that steals your RuneScape login, session tokens, and Discord data. Here's what each tier actually gets you — and why you shouldn't pay for any of it.
Access to free Storm plugins, 1 client session
What you actually get: credential-stealing malware and a bannable, unapproved client.
Free plugins, 3 sessions, subscriber Discord
What you actually get: credential-stealing malware and a bannable, unapproved client.
Free plugins, 3 sessions, subscriber Discord
What you actually get: credential-stealing malware and a bannable, unapproved client.
• The Allure plugins harvest your username, password, and Jagex session token and send them to a remote server — the malicious code is present even in the free tier.
• Storm Client is not a Jagex-approved client, so using it is a bannable offense on top of the malware risk.
• Nearly every legitimate feature it charges for already exists free and safe in the official RuneLite Plugin Hub.