The CustomOreGen mod should be added to the list.

The code contains the usage of ObjectInputStream via SerializationUtils.

https://github.com/lawremi/CustomOreGen/blob/master/src/main/java/CustomOreGen/CustomPacketPayload.java#L29

I've added it to the list of affected mods, thank you for reporting!
I'm currently looking for a good solution to properly patch that one as well since it is not using OIS directly