Is Curseforge still compromised?

[Ginzø-dalaran]

Was looking to update a couple add-ons and maybe grab a couple new ones but remembered there was a post regarding Curseforge being compromised in some way. I don’t use their app. I download and place each add-on like a psychopath. >_>;

[Umpalümpa-silvermoon]

Isn’t Curseforge the app? If you download directly from curse then I don’t think there was ever an issue. In one of those posts about the app being compromised there was a comment that noted that it was mainly for Minecraft and since WoW add-ons are in a sandbox (whatever that means) they weren’t affected by the issue.

[Ginzø-dalaran]

Yea I wasn’t familiar with some terminology and wasn’t sure if there was a difference between the app use or downloading it directly. o/ Thanks!

[Estalayia-borean-tundra]

@Estalayia-borean-tundra

@Härland-grobbulus

Any idea how far back in time they were compromised

Apparently, it was more of a concern for Minecraft than WoW 'cause (allegedly) it was Minecraft addon developers that was compromised and not WoW addon developers. Curse, itself, is uncompromised. Again, allegedly.

@anon59086671

Curseforge is fine. A few Minecraft addon developers had their account compromised and a malware-loaded Minecraft addon made its way in. Curseforge itself was not compromised and WoW is certainly not affected.