Is CurseForge safe? An honest answer for players and parents
Is CurseForge safe? Who runs it, how uploads are scanned, what happened in the 2023 fractureiser malware attack, what the app's ads are, and how to stay safe.
· 5 min readThe short answer
Yes, CurseForge is safe if you use it with care. It's a long-running, legitimate mod site run by Overwolf, and every upload goes through automated scans and moderation. It isn't perfect: in 2023 the fractureiser malware got into some mods before it was caught. Download only from curseforge.com or the official app, stick to well-known mods, and never run modpacks sent to you in messages.
If you're a parent whose child wants "CurseForge", or a player about to install your first mods, you want a straight answer. Here it is: CurseForge is a legitimate, widely used site, and it's safe to use with some sense. Below is why, what went wrong once, and how to keep the risk low.
Who runs CurseForge
CurseForge is run by Overwolf, a company that makes software for gamers. Overwolf bought CurseForge from Twitch in 2020. As of November 2026, CurseForge's support pages and the Overwolf terms that cover the CurseForge app still name Overwolf, and we found no official announcement of a sale.
It hosts mods for many games, but Minecraft is the biggest. The mods themselves are made by independent authors, not by CurseForge.
How CurseForge checks uploads
After the 2023 incident below, CurseForge described its checks in three layers:
| Layer | What happens |
|---|---|
| Automated tests | Every uploaded file goes through over a dozen automatic tests, including antivirus scans and checks on the file's structure |
| People | Project pages are reviewed when created or updated; files the tests flag go to a security expert, who may test the mod in the game |
| Community | Authors and players can report a mod, and big authors talk to CurseForge directly |
No scanner catches everything, especially brand-new malware made for Minecraft mods. That's exactly what happened in 2023.
What happened with fractureiser in 2023
In June 2023, players and mod authors found malware, later called fractureiser, hidden inside Minecraft mods on CurseForge and on dev.bukkit.org, a site for server plugins.
- How it got in: an attacker made several new accounts and uploaded infected projects, then broke into a device belonging to a well-known pack studio and used its account to push infected updates to popular projects, including Better Minecraft packs.
- What it did: it only targeted Windows and Linux. Once running, it tried to infect other Java files on the computer and to steal browser cookies and logins, Discord, Microsoft and Minecraft accounts, and to swap cryptocurrency addresses on the clipboard.
- How big it was: CurseForge says the infected files were downloaded about 6,500 times in total.
It was spotted by the community, not CurseForge's scanners. A volunteer team investigated it in the open, and the server sending out the malware was taken down. The investigators have since declared the event over.
How it was handled, and what changed
CurseForge's response, from its own incident report:
- Banned the attacker's accounts and deleted their files.
- Took apart the malware, scanned its whole database, and removed infected files.
- Released free detection tools and a guide to checking your computer.
- Added new automated tests that detect this malware and similar file tampering.
It also said it was exploring signed mod files and stronger two-factor sign-in; those were ideas, not finished changes, at the time. Modrinth, the other big mod site, scanned its recent uploads and found no infected files.
The app, Overwolf and ads
The CurseForge app is free and shows ads. There are two versions: a standalone app, and an Overwolf version that adds in-game features. If you don't want Overwolf on the computer, choose the standalone download. CurseForge Premium, a paid subscription, removes ads in the app and on the website. None of this is required to install mods.
The ads are a nuisance, not a danger in themselves. But a "download" button in an ad is not the mod's download, so read what you're clicking.
How to stay safe on CurseForge
- Download only from curseforge.com or the official CurseForge app. Avoid "reupload" sites that copy mods onto their own pages; you can't tell what's been changed, and authors lose credit.
- Never run a modpack someone sends you as a file. CurseForge warned in 2026 about scammers on Discord sending a small zip as a "required modpack" that contained malware. These don't come through CurseForge itself.
- When importing a pack, choose "CurseForge Files Only" where the app offers it, so only files from CurseForge are installed.
- Prefer well-known mods with many downloads and a long update history.
- Keep an antivirus on, and use two-factor sign-in on your Microsoft and Discord accounts.
- Treat mods like programs. A mod is code that runs on your computer with your permissions.
How Packspire handles this
Packspire builds NeoForge 1.21.1 packs from the official sites only. It links every mod file rather than re-uploading it, checks each file against its site so you get exactly what the author published, and scans every file for known malware before the pack is built.
Plan a pack built from checked files, or read how to install a modpack safely.
Frequently asked questions
Does CurseForge have viruses?
CurseForge itself isn't a virus, and it scans every upload. Malware has slipped through once, in the 2023 fractureiser attack, and was removed. Sticking to well-known mods from the official site keeps the risk low.
Is CurseForge a virus?
No. It's a legitimate mod site and app run by Overwolf. If you'd rather not have Overwolf on your computer, download the standalone CurseForge app instead.
Is CurseForge legit?
Yes. It's one of the two main places Minecraft mods are published, alongside Modrinth, and has been for years. Mod authors are paid through its rewards program.
Is CurseForge safe for kids?
The site and app are safe to use, but they show ads and mods are code from many authors. A parent can install the app, stick to popular packs, and make sure modpacks aren't accepted as files from strangers on Discord.
Sources
- Safeguarding our community: incident report, CurseForge, June 2023
- fractureiser investigation, with its timeline and user guide
- June 2023 infected mods detection tool, CurseForge support
- Stay safe: how to spot suspicious modpacks, CurseForge, May 2026
- Download the CurseForge app
- CurseForge Premium, CurseForge support
- Overwolf platform terms
- Overwolf acquires mod repository CurseForge from Twitch, GamesBeat, June 2020
