@cototadydelam There is an issue in vcredist c++ that we are currently investigating causing it to not prompt for some windows 10/11 users. Hopefully this should be fixed in the next patch release.
We released version 9.0 recently. It includes some long requested features, notably automatic java management.
Go check it out!
https://t.co/tsH2ceDtDK
Yesterday we removed a mod called "Windows Borderless" which was found to contain malware.
⚠️If you are a Windows user and are one of the 372 people who downloaded and used a mod called "Windows Borderless", you are at risk. More info available here: https://t.co/mKfdK2cAAF
We have released Prism Launcher 8.1 AND 8.2 today! We have really picked up with our development speed!
Check out the release post here: https://t.co/Os5MUSysUj
We are now also on Bluesky! We will continue posting on Mastodon and X. Though we might eventually move away from X, as we are not really happy with the direction the platform is taking.
https://t.co/rmWSPCjOsN
As you might have heard by now, Prism Launcher 8.0 is out! This is a big release so make sure to check the changelog!
https://t.co/AFn4R28bDN
(We are very good at doing social media and definitely did not forget to make an announcement!!)
In case you haven't done so yet, make sure to update to Prism Launcher 7.0! We released it a few days ago and it includes some nice new features.
Read our blog post here: https://t.co/kGTitf8dVH
Following the ongoing situation we would like to provide you with clarity, answers and information about the current status of things as well as the next steps we are taking to ensure the safety of our community.
TL;DR - We have cleaned all infected files on the platform and have sealed the security breach to prevent similar files from being introduced again. If you have downloaded any of the affected files and in order to play safely, make sure to follow the steps described in our article: https://t.co/yKRGu54gDN
Actions Taken
- We have blocked all initial reported projects and banned the malicious authors.
- We deployed a detection tool used to detect malicious files with an attached article explaining the necessary actions.
- We have gone through a thorough process of scanning all the files on the CurseForge platform and have removed all the affected ones.
- We have added a second tool that will scan the rest of your JAR files for any remains of malicious code that can put you at risk.
Questions and Answers
Q: Have accounts on CF been compromised?
A: No. Malicious accounts were created and have uploaded infected projects. Those were removed and the accounts banned.
Q: How many users have been affected?
A: We now know infected files have been downloaded approximately 6,000 times (non-unique) for the entire infection period. Just to give perspective, this accounts to about 0.015% of CurseForge’s daily downloads for Minecraft. We have taken this very seriously and have deployed solutions to help affected users and safeguard the platform as a whole.
Q: When did this start?
A: According to our findings, this issue started a few weeks ago but the impact was only shown in the last 24 hours.
Q: What are you doing to prevent this from happening in the future?
A: We have blocked the breach used by this malware and have added additional scanning protocols to our moderation process.
Q: Can I play modded Minecraft?
A: If you have not downloaded any of the listed projects (in the article attached below) you are safe to play. If you still want to check your files or are using mods outside our platform, make sure to follow and complete the steps below before you play with mods.
What Should I Do Now?
Use both our detection tools to make sure that:
You have no active malicious files on your computer
You have no infected JAR files which are still dormant on your computer
Read more about this and download the tools here: https://t.co/yKRGu54gDN
@Steve_Poland_MC You can try using the MinGW based builds from the GitHub Release. For example "PrismLauncher-Windows-MinGW-w64-Portable-6.3" https://t.co/LX4KjVx2dm
Update: The working group investigating this malware has found code that hints at self-replication capabilities. It is currently unclear if these capabilities have been used at all. We recommend being on the safe side and not launch Minecraft for now.
Multiple sources are reporting that popular projects on CurseForge might have been compromised. Avoid downloading anything from CurseForge for the time being and check if you might be already affected.
Read our blog post for more information: https://t.co/I6atakcrQq
@modrinth No, but seriously, it looks really good so far!
It's really nice to see all the variety in free and open source Minecraft launchers these days.
@RWRmrfrog@IrisShaders We're working on it! But for now, there's @PrismLauncher which has support for installing mods and modpacks from Modrinth very easily.