CurseForge and Bukkit get hit with malware for Minecraft mods

Just a bit of a PSA here for anyone diving into Minecraft modding, as recently there’s been a problem on both CurseForge and Bukkit with malware.

There’s been a lot of reports on this and the situation has been moving pretty quickly, but for now you should stay away from downloading any Minecraft mods from both platforms. The issue affects both Windows and Linux.

From the report on hackmd and the Prism Launcher post that references it, it seems a bunch of compromised accounts were used to update quite a number of popular mods to insert malicious files. According to the report the issue goes back multiple months, so it’s not exactly clear just how wide-spread it truly is and work is ongoing by many people to figure it all out.

This malware seems to work across multiple stages, and both links above show you how you can check to see if you’ve been affected, which needs you to go hunting in a few places because it will make new files and folders on your system. However, if you were using the Prism Launcher via Flatpak on Linux the malware likely would have failed to work due to the sandboxing. Either way, checking is a good idea.

For a good place to download mods you can look to Modrinth and the Prism Launcher.

If you need a Steam Deck guide for Minecraft check out this article.

Article taken from GamingOnLinux.com.