Comment on Github scam investigation: Thousands of "mods" and "cracks" stealing your data

truthfultemporarily@feddit.org ⁨5⁩ ⁨weeks⁩ ago

• sem@lemmy.blahaj.zone ⁨5⁩ ⁨weeks⁩ ago

  Yeah it’s difficult how to know which mods are trustworthy

  source
• FarceOfWill@infosec.pub ⁨5⁩ ⁨weeks⁩ ago

  There have been cases of crypto miners embedded but once discovered they’re nuked so quick it’s hard to get more than rumours.

  C# modding is the most likely vector (rimworld, cities skylines, unity stuff) but Skyrim skse mods are raw code too. All can be misused.

  Usually lua mods have a sandbox so they’re safe. Eg.factorio. and, um, more but my mind has gone blank.

  source