After curse forge got hacked and filled with malware.
that was the minecraft side
not wow but they fixed it
it was not hacked just bad add ons were put in
3 Likes
and how do we know the addons aren’t still hosting bad files?
they removed them and like i said it only effect minecraft players not wow players
but if you are paranoid dont use nexus also
they do check the files
Unless you were using one of the handfull of Minecraft mods, it’s not an issues for you.
Here’s the statement from Curseforge on Twitter.
As they stated in their analysis, the hack only affected JAR files which WoW does not use.
You can update your WoW addons.
4 Likes
“CurseForge emphasized that its platform is not compromised, as no admin account was hacked, and that the malware only affects Minecraft users.”
3 Likes
Lua files arent executables.
Many popular addons, especially WeakAuras have code restricting access to certain events and variables explicitly to prevent abuse. (Such as wiping out your /slash commands list for ALL functionality.)
WoW addons simply cannot do lasting damage to your PC. If you are still uncertain, I recommend making a backup of your WTF folder, and updating your addons again. And if things hit the fan, just delete your current WTF folder and replace it with the backup.
1 Like
That’s fine to say but whenever dealing with any sort of scripting, in the back of my mind, I keep hearing the faint echoes of “Don’t be so paranoid, you can’t get infected from a Word document!”
(edit - not trying to encourage any paranoia, I just don’t like ever declaring a risk is “zero” when it comes to computer security … I’ve just seen too much creative maliciousness and too many unforeseen bugs over the years)
They already said wow wasn’t affected.
2 Likes
oh right, thanks for this comment, now I TOTALLY trust it again, because it wasn’t bad to begin with.
Just use WoWup OP.
Well, Word and other office products use VB/VBS right? It’s not a like Lua scripts can spread like a virus, but you can certainly call it malware if someone makes the mailbox send you all your gold to a middle-man.
2 Likes
Now that WoWup was blocked by curseforge…do we know where they are even getting their addons.
(Didn’t know that they were blocked by curseforge, until now)
You have a choice to choose Curseforge OR Wago in WoWup.
Just use Wago…no need to touch that curse crap.
Been safe for a while now, yeah. Curse fixed the breach.
This thread feels like deja vu
It only affected MC mods.
Some, but not all sadly. overwolf has put a hold on everyone else getting full addons.