FailToSurvive

Following the ongoing situation we would like to provide you with clarity, answers and information about the current status of things as well as the next steps we are taking to ensure the safety of our community. TL;DR - We have cleaned all infected files on the platform and have sealed the security breach to prevent similar files from being introduced again. If you have downloaded any of the affected files and in order to play safely, make sure to follow the steps described in our article: support.curseforge.com/en/su… Actions Taken - We have blocked all initial reported projects and banned the malicious authors. - We deployed a detection tool used to detect malicious files with an attached article explaining the necessary actions. - We have gone through a thorough process of scanning all the files on the CurseForge platform and have removed all the affected ones. - We have added a second tool that will scan the rest of your JAR files for any remains of malicious code that can put you at risk. Questions and Answers Q: Have accounts on CF been compromised? A: No. Malicious accounts were created and have uploaded infected projects. Those were removed and the accounts banned. Q: How many users have been affected? A: We now know infected files have been downloaded approximately 6,000 times (non-unique) for the entire infection period. Just to give perspective, this accounts to about 0.015% of CurseForge’s daily downloads for Minecraft. We have taken this very seriously and have deployed solutions to help affected users and safeguard the platform as a whole. Q: When did this start? A: According to our findings, this issue started a few weeks ago but the impact was only shown in the last 24 hours. Q: What are you doing to prevent this from happening in the future? A: We have blocked the breach used by this malware and have added additional scanning protocols to our moderation process. Q: Can I play modded Minecraft? A: If you have not downloaded any of the listed projects (in the article attached below) you are safe to play. If you still want to check your files or are using mods outside our platform, make sure to follow and complete the steps below before you play with mods. What Should I Do Now? Use both our detection tools to make sure that: You have no active malicious files on your computer You have no infected JAR files which are still dormant on your computer Read more about this and download the tools here: support.curseforge.com/en/su…

We are looking into an incident where a malicious user uploaded projects to the platform. This is relevant only to Minecraft users and we have banned all accounts involved. CurseForge itself is not compromised in any way! Please follow the thread below for more information 👇