This included being included in some modpacks. There is currently an ongoing incident within the Minecraft modding community where malware has been found to be included in some Minecraft mods (and bukkit plugins) on CurseForge. Keep an eye out for more updates on that in the coming week or two.Īs always, if you have any concerns or questions, please reach out in #malware-incident channel in our Discord. Make sure that you have scanned your system using the tools mentioned above before installing or playing Minecraft.ĪTLauncher will be investigating how we can detect for and warn against this type of attack going forward, including checking not only for this specific type of malware, but also checking for changes to your mods since downloading.

Non official modpacks were not verified as they use external download sources, so if you plan on installing a third party pack from Technic, you should be cautious and scan after downloading.

Technic: All clear to install and use Technic official modpacks. Modrinth: All clear to install and use Modrinth modpacks and install and use Modrinth mods CurseForge: All clear to install and use CurseForge modpacks and install and use CurseForge mods ATLauncher: All clear to install and use ATLauncher modpacks Several platforms have come out and confirmed that they've scanned and removed all traces (if there were any) of the malware from their sites: CurseForge Infected mods detection toolīoth these tools will detect for any traces of the malware on your PC or within your modded Minecraft installations (be sure to scan your entire drives, or at least your user folder and any folders where you run Minecraft from). The situation seems to have relaxed a bit, the details on the malware and what it does is known (again if you're interested take a look at this GitHub repo) and we have tools available to detect if you're infected: NOTE: We posted this on our Discord when it happened, but forgot to post to our News feed, so if you already got the ping from our Discord about this issue, this is the same issue, not a new one. There is a thread in our Discord if you have any questions. More information about the exploit and affected mods and solutions can be found at. The best course of action currently if you play older modpacks on 1.7/1.12 is to simply not join any public servers unprotected and to add this mod to your instances to protect yourself from the exploit. If you play singleplayer only you don't have anything to worry about, only if you play online on public servers.ĭue to the nature of this being a remote code execution exploit, any attacker on the same server as you could've run any code on your computer, so as such there's no way to tell if you've been affected or what code was run. The scope at the moment seems to mostly affect mods on 1.7 and 1.12 but may also occur on other Minecraft versions, there is still work going on to find a full list of mods and affected versions. This is an RCE which allows bad actors to run code remotely on your computer when connected on the same server as them. If your idea already exists, vote for it, this will increase the chances for the idea to become reality.Unfortunately there is another exploit going around the modded Minecraft community at the moment. This board is being moderated, if you wish for your idea(s) to go public, please consider the following: For game or mod suggestions go to our discord

Multimc forge messed up from mods