This is not a joke or something new. It is being noticed more frequently that many accounts on Roblox recently are receiving messages from their friends who have had their accounts hacked. These messages contain a YouTube link to a video that tells you to use another link from the description of the video. That java script link is the reason accounts are being stolen. We highly recommend you DO NOT click on any suspicious links. I wouldn't even bother going to the video either. It may even be best to unfriend any friend that already has had their account stolen, just to protect yours.
If you are a victim of this scam, you are able to get help by going here:
https://roblox.com/support
Below is an example of these scam messages going around: