CurseForge is a popular platform for downloading and managing modifications, also known as mods, for the game Minecraft. This platform provides a vast collection of mods created by the Minecraft community, allowing players to enhance their gameplay experience and customize their worlds. Downloading mods from CurseForge is straightforward. Users can visit the CurseForge website and search for the desired mods using various filters, such as version compatibility, popularity, and category. Once the desired mod is found, users can click on the mod's page to access additional information, including the mod's description, screenshots, and user reviews. To download a mod, users can click on the "Files" tab on the mod's page, where they will find a list of available versions and files.
If nothing happens, download Xcode and try again.
Please be aware that this is only for the known compromised jars there is possibility for more advanced malware to be spread, deleting these files does not mean you are 100 safe. We recommend not downloading or updating any mods from CurseForge at the moment , and we will update y all with the latest news as more information becomes available.
To download a mod, users can click on the "Files" tab on the mod's page, where they will find a list of available versions and files. Each file corresponds to a specific Minecraft version and mod edition. Users should ensure they choose the file compatible with their Minecraft version.
[Modded Minecraft] Curseforge has been compromised- do not download or update any minecraft mods from there. (1 Viewer)
07 Jun 2023
Multiple groups are reporting CurseForge as compromised. Malware has been uploaded in various projects and it may be a security vulnerability in the CurseForge platform. We recommend not downloading or updating any mods from CurseForge at the moment, and we will update y'all with the latest news as more information becomes available.
Table of contents:
- Who has been affected (so far)
- What we know about the malware
- Am I infected?
- Distribution
Who has been affected (so far) #
According to Luna Pixel Studios "tenos of mods & modpacks, mostly on 1.16.5 1.18.2 and 1.19.2 have been updated to include malicious files"
The currently confirmed affected mods and modpacks are as follows:- Dungeons Arise
- Sky Villages
- Better MC modpack series
Fabuously Optimized(Found to not be compromised)- DungeonsX
- Haven Elytra (bukkit plugin)
- Skyblock Core
What we know about the malware #
Please be aware that this is only for the known compromised jars there is possibility for more advanced malware to be spread, deleting these files does not mean you are 100% safe. Please currently assume that any files on curseforge aren't safe old releases have been found to be modifed.
Am I infected? #
Stage 1 of the malware attempts to drop a file into the following locations:
- Linux: ~/.config/.data/lib.jar
- Windows: %LOCALAPPDATA%\Microsoft Edge\libWebGL64.jar (or ~\AppData\Local\Microsoft Edge\libWebGL64.jar)
- Yes, "Microsoft Edge" with a space
- Also check the registry for an entry at HKCU:\Software\Microsoft\Windows\CurrentVersion\Run
- Or a shortcut in %appdata%\Microsoft\Windows\Start Menu\Programs\Startup
If stage2 successfully downloads, it will attempt to make itself start on boot by modifying the Windows registry and dropping a systemd unit into /etc/systemd. (The Linux side of this payload is unlikely to work as it requires root privileges.)Distribution #
Some modpacks have had updates published for them without the knowledge of the authors, adding a dependency on malicious mods. These updates were archived immediately after uploading, meaning they do not show on the web UI, only via the API.
We cannot tell if the malicious mods were always malicious, or if they got edited. They have upload dates multiple weeks in the past. A CDN compromise or cache poisoning is not out of the question due to Curse's usage of the extremely outdated and insecure MD5 to verify downloads."You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.
After selecting a file, users can click on the download button to initiate the download process. CurseForge also provides the ability to manage mods easily. The platform offers a desktop application called the "CurseForge launcher" that simplifies the installation and management of mods. This launcher automatically detects Minecraft installations on the user's computer and allows for easy installation and removal of mods with a simple click. Despite its popularity, CurseForge may experience occasional downtime or technical issues. During these periods, users may encounter difficulties accessing the platform or downloading mods. In such cases, it is advisable to wait for the issue to be resolved or check for updates from the CurseForge team through their official website or social media channels. In conclusion, CurseForge is a valuable resource for Minecraft players looking to enhance their gaming experience through mods. Its user-friendly interface and extensive collection of mods make it a go-to platform for Minecraft enthusiasts. Although occasional downtime or technical issues may occur, overall, CurseForge provides a convenient and reliable way to download and manage Minecraft mods..
Reviews for "Curse Forge vs. Other Platforms: Which is the Best for Minecraft Mods?"
1. Jennifer - 2 stars - I was really looking forward to downloading Curse Forge for Minecraft, but to my disappointment, the download process was a complete hassle. The website kept crashing, and it took me several attempts just to get the download to start. Even then, it was extremely slow, and my computer froze multiple times during the process. I eventually gave up and found an alternative source to download mods for Minecraft. Overall, I found the experience frustrating and time-consuming.
2. Mark - 1 star - Curse Forge for Minecraft is a complete waste of time. The website is full of ads and pop-ups, which made it difficult to navigate and find the download link. Once I finally managed to start the download, it took forever to complete. The installer was also problematic as it kept crashing. After several failed attempts, I decided to give up and explore other options. The whole experience was frustrating and a waste of my precious time. I do not recommend Curse Forge for Minecraft.
3. Sarah - 3 stars - Although I managed to download Curse Forge for Minecraft, I was still disappointed with the overall experience. The website was cluttered and confusing, making it difficult to find the right mods for my game. Additionally, the installation process took longer than expected, and there were compatibility issues with some of the mods. It was frustrating to troubleshoot and fix these issues, and I ended up finding a different mod loader that was easier to use. While Curse Forge may work well for some, I personally did not have a positive experience with it.
Exploring the Curse Forge Library for Minecraft