CurseForge is a real mod platform, bought by Overwolf from Twitch in 2020, and its homepage says it scans and moderates every mod. The catch is that mods are files made by strangers: in 2023 a malware campaign called fractureiser spread through Minecraft mods on the site. Download carefully and keep your security software on.
If your kids, or you, play Minecraft or any other moddable game, CurseForge will have come up. So will the worry that a mod could carry a virus. I've read CurseForge's own homepage, the public history of who owns it and the write-ups of the one big malware incident, so you can judge it with the facts rather than a rumour.
What CurseForge is and who owns it
CurseForge describes itself as a mod and add-on platform where players find mods for their games and creators publish them. Its homepage claims 500K+ mods, 134K mod authors and 129 games, including Minecraft, World of Warcraft, The Sims 4 and Stardew Valley. Those are CurseForge's own figures, not something I can check.
The history matters. According to Wikipedia, the company behind it, Curse, was founded in 2006. On June 22, 2020, Overwolf announced it had acquired CurseForge from Twitch for an undisclosed amount. The site's footer credits Overwolf, so Overwolf is the company to look up if you want to read the terms and privacy policy.
How CurseForge says it keeps mods safe
The CurseForge homepage says it scans and moderates every mod, presenting this as a way to keep installs safe. It doesn't explain how the scanning works, so I can't tell you how thorough the checks are. The honest summary is that it's a stated safeguard, not a guarantee that no bad file will ever slip through.
The platform also has a desktop app that lets you install, update and manage mods, and the homepage says it runs on PC, Mac and Linux. Using the app is convenient, but it doesn't change the basic fact that you're installing code written by other people.
The fractureiser malware incident
This is the episode most people mean when they ask if CurseForge is safe. Prism Launcher, a Minecraft launcher, reported that starting June 6, 2023 UTC, multiple groups reported many CurseForge and Bukkit projects as compromised. The malware was later named fractureiser.
The fractureiser investigation team says it was found in several Minecraft projects on CurseForge and BukkitDev, and spread through mods included in popular modpacks. Prism Launcher's alert says it targeted Windows and Linux only, and that Modrinth, another mod site, was unaffected.
Notably, the alert says the affected accounts had two-factor authentication enabled, so a simple stolen password looked unlikely. It also reports that CurseForge said all infected files had been removed or were unaffected. The investigation team now says the event has ended, with no follow-up stage 0 files found, but warns that systems already infected remain a concern.
| What I checked | What the public record says |
|---|---|
| Who owns CurseForge? | Overwolf, which bought it from Twitch in 2020 |
| Does it scan mods? | Its homepage says it scans and moderates every mod |
| Has malware been found on it? | Yes, fractureiser, reported from June 6, 2023 |
| Which systems were targeted? | Windows and Linux only, per Prism Launcher |
| Is the incident still active? | The investigation team says the event has ended |
The real risks of installing mods from CurseForge
Being a real, owned platform doesn't make every file on it safe. Mods are community-made, and a bad actor only needs to get one file past the checks. Here's what to bear in mind:
- A mod can run code on your computer, so a bad one can do real damage.
- A popular author's account can be compromised, as fractureiser showed.
- Modpacks pull in other mods, so an update can bring in something you didn't choose.
- Children often install mods without a second thought.
- Cracked or reposted copies on other sites carry extra risk because they skip CurseForge entirely.
If something has already gone wrong, my guide to checking whether an account has been hacked shows the warning signs to look for, and the same habits apply to a gaming or email account.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
How to download from CurseForge more safely
- Use CurseForge's own website or its official desktop app, typing the address yourself.
- Pick mods with a long history and plenty of other players using them.
- Check the author and the update history before you install.
- Install mods one at a time rather than adding a pile at once.
- Keep your operating system and security software up to date.
- Use a unique password and two-factor authentication on your own account, and a password manager such as the one in my password manager review.
If you're a creator publishing there, remember that your account is a target. Protect it with a unique password and two-factor authentication, because fractureiser reached users through compromised author accounts.
Fake CurseForge sites, downloads and support
A famous mod site invites copycats. Fake CurseForge pages, modded launchers and files shared in chats can carry malware, and none of them has anything to do with Overwolf.
- Don't download a CurseForge app from a link in a video description or comment.
- Ignore messages offering free premium items or cheats in exchange for logging in.
- Never share your Minecraft, Microsoft or email login with anyone offering support in a chat.
- Delete any mod that comes as an executable installer, because mods aren't normally installers.
- If you think you ran something harmful, scan your computer and change your passwords from a different device.
My verdict on CurseForge
In short, CurseForge is a real platform with a named owner, Overwolf, and a stated scanning policy, so it isn't a scam. But it also hosted files in the fractureiser incident, and mods will always carry some risk because they're code from strangers. Use the official site or app, install carefully and keep your security software on, and treat any file that behaves oddly as a reason to stop.
Frequently asked questions
Who owns CurseForge?
Overwolf. According to Wikipedia, Overwolf announced on June 22, 2020 that it had acquired CurseForge from Twitch, and the site's footer credits Overwolf.
Does CurseForge scan mods for malware?
Its homepage says it scans and moderates every mod, though it doesn't explain how the scanning works.
What was fractureiser?
A malware campaign reported from June 6, 2023 that was found in Minecraft projects on CurseForge and BukkitDev. Prism Launcher's alert says it targeted Windows and Linux only.
Is the fractureiser malware still a threat?
The investigation team says the event has ended and no follow-up files were found, but systems that were already infected remain a concern.
Are mods from CurseForge safe for kids?
Mods are code written by other people, so no mod site can promise zero risk. Use the official site or app, install one mod at a time and keep security software running.
