Yes, CurseForge is safe in 2026. After the fractureiser malware incident in mid-2023, CurseForge significantly improved its upload scanning, account security, and verification processes.
What Happened with Fractureiser
In June 2023, several CurseForge mod author accounts were compromised. Attackers uploaded malicious versions of popular mods containing the fractureiser malware. The malware could steal browser credentials and Discord tokens.
CurseForge responded by:
- Removing all infected files
- Forcing password resets for affected accounts
- Adding two-factor authentication requirements for authors
- Improving automated malware detection
- Working with the community to develop scanning tools
Is CurseForge Safe Now?
Yes. Since the incident, CurseForge has maintained stronger security:
- Automated file scanning on all uploads
- Author account 2FA enforcement
- Project review before public listing
- Community reporting for suspicious files
- Regular security audits
Best Practices
- Download from CurseForge directly or through the CurseForge app
- Avoid downloading CurseForge mods from third-party mirror sites
- Check mod update dates and download counts
- Keep Java and your launcher updated
- Use a launcher that verifies file integrity
FAQ
Is CurseForge safe after fractureiser? Yes. CurseForge improved security measures after the 2023 incident.
Is CurseForge safer than Modrinth? Both are safe. CurseForge has a longer history and larger library. Modrinth has open source platform code.
Can I trust CurseForge mods? Yes, when downloading from the official CurseForge platform. Avoid third-party mirror sites.
Related: Is Modrinth safe?, CurseForge vs Modrinth comparison