Describe the bug

I installed FO 5.1.0-beta.5 directly through the CurseForge launcher, and I found a mod called "Our sever" by ps3wins4ever in the mod list. The file name is iris-mc1.20-1.6.4.jar. Given the recent fractureiser thing, I got suspicious and didn't run it.

I compared the SHA-512 hashes of "Our sever" and the official Iris 1.6.4 jar file from their website, and they matched. I'm not sure if this was even needed, but I also decompiled both using quiltflower and used diff -rq to try to find any differences between both decompiled mods (could have done it on the jar files instead, I just didn't) and found no differences, so this leads me to believe that it's not malware.

It's worth noting that the user ps3wins4ever doesn't have any public projects on CF, as far as I can see.

Sorry if this isn't the right channel for this or if bug isn't the right category. I just wasn't sure where to put this, since neither the changelogs nor the mod list mention this mod. I also didn't find any mentions of the mod or author in Issues, but I did see #626 - maybe this is related?

Modpack version

5.1.0-beta.5

Launcher

CurseForge Launcher

Other things

• I updated FO to a newer version (mention, what version to what version)
• I added/removed some mods or resource packs (mention, which ones)

Additional context

The mod's description is "This modpack includes essential (for server hosting), iris(for Shaders), sodium(for optimization), and Voice chat(For talking in server) To use Voice Chat you need a stable Internet connection." It only has 16 downloads, was released 2 days ago, and has no changelogs, screenshots, or versions. Even though the mod is just Iris, the description claims to include much more than that (and calls itself a modpack? Maybe it was copy-pasted?)

I understand your concern.
That specific user has simply tried to upload Iris to CurseForge, and apparently didn't even get the project type right (mod vs modpack). CurseForge, however, has rejected the project but it still appears in their CDN cache as a referenced project for the jar.

I'll see if I can convince CF to fix it but otherwise there is nothing I can do and nothing you should worry about, FO is still using the original jar from original developer in Modrinth.

CurseForge Launcher glitches

Remember "Beasts of the New World", a mod that you might've noticed on the mod list of FO 4.10.1? That bug has now been fixed in the CurseForge Launcher. To reiterate, that mod was never in Fabulously Optimized (nor in your computer), it was simply a visual bug with the launcher.

On a similar note, there is a current visual bug in 5.x.x betas - Sodium appears as "Our sever". Rest assured, it is the authentic Sodium mod downloaded directly from their Modrinth listing, NOT a fork. The reason it appears wrongly is that someone tried to upload it to CurseForge and CurseForge rejected it. But because the file on FO is identical to one that someone tried to upload, CurseForge Launcher tries to be helpful in describing what the mod is.

I had a discussion with an Overwolf engineer about this and we agreed that this behaviour is confusing, so it will be changed soon.

Edit: the same thing happened with Iris. As of Jul 4, the Sodium one is fixed but modpack files using it currently need a manual review (hopefully just once).

https://discord.com/channels/859124104644788234/875750882652880907/1123672083562504382 (via)

Iris ("Our sever") doesn't seem to appear anymore at all as of 5.1.0-beta.9.