"my World" third-party communities Curseforge and Bukkit were invaded by Trojans, and about 20 well-known Mod were affected.
CTOnews.com June 12 news, "my World" third-party open source initiator Prism Launcher recently warned that hackers had hacked into "my World" third-party forums Bukkit and CurseForge, using the accounts of several well-known Mod creators to distribute a series of Mod with malicious Trojans, affecting more than 20 Mod.
It is reported that the hackers first invaded other websites and "hit the library" with a password to gain login rights for some well-known "my world" Mod creators' accounts, according to ▲ source GitHub. Then use these accounts to log in to Bukkit and CurseForge forums, distribute Mod with Trojans, and let these Mod replicate themselves, spreading infection to other computers on the LAN.
Luna Pixel Studio, a third-party studio in my World, claims that 20 Mod models have been affected, and players who have downloaded the relevant Mod in the past may be infected.
▲ source Luna Pixel StudioIT home after inquiry that, as of publication, CurseForge, Bukkit forum and Modrinth download station have responded, roughly solved the existence of the forum with malicious Trojans Mod, currently download Mod on these sites is generally safe, but for security reasons, it is recommended to carry out certain testing, Trojan detection tools can be found here.
The following is a list of affected Mod:
Dungeons Arise
Sky Villages
Better MC modpack series
Fabuously Optimized
Dungeonz
Skyblock Core
Vault Integrations
AutoBroadcast
Museum Curator Advanced
Vault Integrations Bug fix
Create Infernal Expansion Plus
Display Entity Editor
Haven Elytra
The Nexus Event Custom Entity Editor
Simple Harvesting
MCBounties
Easy Custom Foods
Anti Command Spam Bungeecord Support
Ultimate Leveling
Anti Redstone Crash
Hydration
Fragment Permission Plugin
No VPNS
Ultimate Titles Animations Gradient RGB
Floating Damage