there's this really bad malware that's being spread on places like curseforge and devbukkit, called fractureiser. fractureiser takes its form as just any minecraft mod you have from the last 2-3 weeks, as a user injected their malware and let it spread. fractureiser plants another .jar file into your system which runs on startup, and steals your credentials, financial information, etc. It also spreads itself onto other .jar files onto your system (likely to trick modders into uploading the virus).

go to https://github.com/fractureiser-investigation/fractureiser/blob/main/docs/users.md for more info

stay safe