Official update post

An exploit was released last night that took advantage of the Source Engine’s file sending mechanism which made it possible to send files with any extension to the client or server. This exploit is likely still active in all other Source Engine games so we’re not going to go into specific details about it.

Needless to say that this was exploited in Garry’s Mod on Windows to send dlls to clients and servers. As far as we are aware the exploit wasn’t used to do anything malicious beyond propagating itself, spamming chat and changing server names. But to be safe we recommend that you consider deleting your Garry’s Mod install and starting fresh. It might be a good idea to do an online virus scan too.
The patch we released this morning attempts to clean up any mess left behind by these exploits and patches the variety of methods which they used. If anyone has further information about the exploits, or any exploits left un-patched please email Garry Newman personally at garrynewman@gmail.com.

For the few who haven't seen it.
 
People were messaging me about this almost all night since I was on Garry's Mod. I was playing on a local server so I don't think it would affect me in any way. It wouldn't, right?
 
People were messaging me about this almost all night since I was on Garry's Mod. I was playing on a local server so I don't think it would affect me in any way. It wouldn't, right?
Probably not; I guess that as long as you're the only one connected to the server, you (and your local server, in this case) should be fine.
 
Huh. Some guy on 4chan was saying he put a backdoor in NutScript and was gonna message spam as many accounts as he could. I guess he wasn't lying.