My avast antivirus detects malware a trojan in the .jar.

Check on https://www.virustotal.com/
For example, here results of test for 5.1.4-fabric.

I've check several files provided on Curseforge and non of them raised any issue. Thus, I believe that this is a false positive of your antivirus software. So I'm going to close this.