[Darkhand]

They were running Metamod, Sourcemod, and Eventscripts locally on their client. Some server admins (myself included) run them to test out plugins and scripts before uploading them to their real servers, but they can also be used for nefarious purposes.

I have the action for detecting plugins changed from ACTION_KICK to ACTION_WARN, so that all the admins are notified to watch those players just in case, but they're still able to play.