The Sims 4

Moving Forward

Due to the extent of the damage done by the compromised mods:

• The Sims 4 Mod List is on pause until further notice. 

  • The only updates to the Sims 4 Mod List will be of any released tools to help combat this attack.

  • The Sims 4 Mod List pause has been lifted.

    • Mods from Mod the Sims have been blacklisted until further notice.

    • Mods from Lovers Lab have been blacklisted since 2023.

• Moving forward, ALL Mods listed on my website (including all other modded games) will be tested and inspected prior to being updated on this website. 

• If available, all links will move to creators personal or Patreon websites. 

• ANY Mod caught with Malicious code will be blacklisted. 

  • If the Mod Creator was hacked, the Mod will remain blacklisted until the malware is removed, the Mod is reuploaded, and an official announcement from the Mod Creator is made. 

  • Following that, Mods in question will be tested and inspected.

  • If a Mod has passed all the above steps but still appears on the Blacklisted Mods page, please report it here.

• In the coming days, I will be adding a contact form so anyone can report any issues with this website or any Mods listed. This will also be used to report ANY Mods you believe to have malware. 

  • The Contact Me Section has been created and rolled out. You can access this section in the Navbar or by clicking here.

State of Malicious Mods

TwistedMexi (via Discord):

• As of today we're still seeing infected downloads via ModGuard's detection, however all of them have been the same previously known downloads.

  • It's not clear whether there's still malicious versions of these files up for download, or if these are previously infected people who have just now downloaded ModGuard.

• To be safe, a reminder to always make sure you're downloading from a modder's official platform and/or account. Avoid mod bundle downloads at all costs.

• Also, we're still seeing a few 1.2 and 1.3 users out there. This is a reminder that ModGuard should be kept up to date at all times, to ensure you're as protected as possible.

  • The current version is 1.4. I'm working on some tweaks for 1.5 which will be out soon.

Malicious Mods Update

TwistedMexi (via X (Twitter)):

Guys, I want to reiterate that the attacks we've seen with mod downloads were not dependent on any individual platform. It's a matter of each individual modder's personal security practices. 

Most of these breaches happen by some unrelated site getting hacked, and leaking all the user emails and passwords. Then if a modder has the same email & password on MTS, patreon, anywhere, it doesn't matter, then the attacker is able to login and replace the downloads.

2FA is also very important for this reason.

Some platforms have improved their mod review process to help catch these attacks, which is great, but at the end of the day the platform has very little to do with it.

Curseforge and The Sims Resource Update

Curseforge has confirmed that:

• All files containing malware have been found and removed.

• New automatic security screenings are already in effect, which scan all mods, looking specifically for malware like this.

• All mods that have been uploaded to Curseforge since the beginning of January 2024 have been scanned and double checked and no further contaminated mods were found.

TSR has confirmed that:

• All files containing malware have been found and removed.

• All mods that have been uploaded to TSR since the beginning of January 2024 have been scanned and double checked and no further contaminated mods were found.

• All accounts that had been hacked have been recovered and secured and are being closely monitored for any suspicious activity.

• Additional security measures and scans are currently being worked on and will be implemented as soon as possible. Until these are ready, uploading script files to TSR is not possible, to ensure the safety of everyone.

Statements/Actions from Affected Websites & Mod Creators

• Curseforge: Removed the affected mod and released the Sims Virus Cleaner Tool to clean any affected mod. Additionally, they released a statement on Discord stating they’ve updated their scans to prevent attempts such as these from happening in the future. See Statement.

• The Sims Resource (TSR): – Removed the affected mods and released a statement on X (Twitter) stating that they’re upgrading the security of their systems. See Statement.

• Mod The Sims (MTS): Removed the affected mod. No known statement given at this time.

• LoversLab (LL)(18+ site): Removed the affected mod. No known statement given at this time.

• MSQSims (TSR Creator): See Statement.