randol_pickpocket by Randolio provides NPC pickpocketing through ox_target. The normal interaction excludes players, animals and vehicle occupants. Skill levels, a minigame and a working dispatch integration are not included.
Dependencies and setup
Extract the resource as randol_pickpocket and start your framework, ox_lib, ox_target and ox_inventory first. OneSync is declared in the manifest. Bridges are supplied for ESX, QBCore and ND_Core; the ND bridge checks version 2.0.0. The README also advertises Qbox, but the QB bridge explicitly checks qb-core, so verify that bridge against your Qbox setup.
In config.lua, the default progress lasts 5000 milliseconds and cooldown is 30 seconds. Police and ambulance jobs are excluded in the client interaction. AlertPolice only contains a chance check and a comment: connect your dispatch system explicitly.
Rewards and server validation
server/sv_config.lua maps GTA zones to low, medium and high item tiers. Default Luck=0.2 means roughly 80% success; successful attempts then choose cash or items with equal probability. Cash defaults to 45–90 across the listed zones. A failed roll makes the NPC attack with a stun gun. Register every configured reward item in your inventory.
The server checks player existence, target type, a six-unit distance, the target state and cooldown. It does not repeat the client NPC-only, job or facing restrictions, and the client supplies the zone name through a callback. Validate those conditions and the reward zone server-side.
The reward callback yields before the target state and cooldown are set, with no reservation or second check afterwards. Test simultaneous attempts and inventory-full handling: AddItem results are not checked before success notification. The five-second progress is also not enforced by a server start/completion record.
Original video preview
Reviewed on 10 September 2026 at revision d4357ed025f60a04de411df63111fa82331e6494. All supplied Lua and framework bridges were inspected; no multiplayer or inventory test was run in FiveM.