The situation seems to have relaxed a bit, the details on the malware and what it does is known (again if you're interested take a look at this GitHub repo) and we have tools available to detect if you're infected: - CurseForge Infected mods detection tool - NekoDetector Both these tools will detect for any traces of the malware on your PC or within your modded Minecraft installations (be sure to scan your entire drives, or at least your user folder and any folders where you run Minecraft from). NOTE: We posted this on our Discord when it happened, but forgot to post to our News feed, so if you already got the ping from our Discord about this issue, this is the same issue, not a new one. There is a thread in our Discord if you have any questions. More information about the exploit and affected mods and solutions can be found at. The best course of action currently if you play older modpacks on 1.7/1.12 is to simply not join any public servers unprotected and to add this mod to your instances to protect yourself from the exploit.

Due to the nature of this being a remote code execution exploit, any attacker on the same server as you could've run any code on your computer, so as such there's no way to tell if you've been affected or what code was run.

If you play singleplayer only you don't have anything to worry about, only if you play online on public servers.

The scope at the moment seems to mostly affect mods on 1.7 and 1.12 but may also occur on other Minecraft versions, there is still work going on to find a full list of mods and affected versions. This is an RCE which allows bad actors to run code remotely on your computer when connected on the same server as them.

Unfortunately there is another exploit going around the modded Minecraft community at the moment.

Curse minecraft launcher