CurseForge Launcher: Malware Infected Modpacks, Users Warned to Stop Downloading

Reports have surfaced of malicious plugin/mod JARs being circulated as early as mid-April, with some of these infected files injected into popular modpacks such as Better Minecraft. The Curseforge launcher, a platform that hosts accounts and forums for add-on software known as mods or plugins, has been compromised, resulting in the injection of malware into numerous popular plugins and mods.

According to gamers who have taken to online forums to discuss the incident, a number of Curseforge accounts were breached, allowing malicious software to be distributed through copies of these plugins and mods. The Fracturiser developer platform, also run by CurseForge, is believed to be affected as well.

It's worth noting that some of the malware used in this attack dates back to mid-April, indicating that the compromised accounts have been active for several weeks. As a result, it's crucial for users to exercise extreme caution when downloading or updating mods through Curseforge.

For now, users are advised to immediately stop downloading or updating mods from Curseforge until further notice. With the popularity of Minecraft mods and plugins, this warning should not be taken lightly. It's essential to prioritize security and take steps to protect your system and game data from potential threats.

The Curseforge launcher is a popular platform for Minecraft mod developers, offering a range of plugin software that extends the capabilities of the standalone game. However, in light of these recent events, it's crucial to prioritize security and ensure that any mods or plugins downloaded are legitimate and free from malware.

Stay safe, and keep your Minecraft experience secure!

Curseforge launcher minecraft