create enchantment port for create fly 1.21.11

[bleak tangle]

heres the compiled jar and the virus total since im new

[magic saffron]

<@&765938438989152266>

[magic saffron]

Don't post JAR files here.

[bleak tangle]

I didn’t see that apologies I can give it in a .rar or sm I don’t have GitHub or anything

[magic saffron]

That is equally as bad.

[bleak tangle]

How? Is it not just folders?

[magic saffron]

JAR, RAR, ZIP; they're all more or less the same thing... and they all can contain bad stuff.

[bleak tangle]

So how am I supposed to send it for help?

[magic saffron]

Just unzipping a compressed file archive is enough to release viruses from it.

[magic saffron]

You make a GitHub account and upload your whole project there.

Alternatively, you ask about specific problems you're having, instead of asking people to download your whole project to see what the problems are.

[bleak tangle]

I barely know Java I think that’s my main issue

[magic saffron]

That would be a problem. Here's some resources:

!!learnjava

[true oracle]

To start modding Minecraft using Fabric, it's strongly recommended to know Java.
Minecraft, in its codebase, and mods, using Fabric API, use more advanced Java concepts like lambdas, generics and polymorphism.
If you don't know all of these concepts, you may have some difficulties modding.

Here are some online resources that will help learning Java
Modern Java (free online textbook): https://javabook.mccue.dev/
JetBrains Academy (free online course): https://www.jetbrains.com/academy/
Codecademy (free online course): https://www.codecademy.com/learn/learn-java
University of Helsinki (free online course): https://java-programming.mooc.fi/
Basic Java Tutorials: https://docs.oracle.com/javase/tutorial/
Introduction to Programming using Java by David J. Eck (free online textbook): http://math.hws.edu/javanotes/

After Learning Java
For most mods you will want to make, you will have to use the Spongepowered Mixin Java library.
To learn more about Mixin, you can use the faq/mixin bot tag by typing !!faq/mixin in #bot-posting .

[wispy slate]

What? No that’s not true?

[magic saffron]

https://developer.android.com/privacy-and-security/risks/zip-path-traversal
https://nvd.nist.gov/vuln/detail/CVE-2025-3445

[wispy slate]

These 2 are for Android and go… but sure new exploits come and go but if you can hack me rn by just unzipping a zip file on windows I’ll give you 100 Bucks

[magic saffron]

https://nvd.nist.gov/vuln/detail/CVE-2025-8088
https://www.tomshardware.com/tech-industry/cyber-security/7-zip-flaws-open-door-to-remote-code-execution

Those have been patched. But, that sort of thing is clearly possible!

[wispy slate]

Sure but these are 7 zip and not windows, and they get patched so quickly that you probably aren’t affected. Plus if someone discovers such an exploit they will definitely not use it on some person in a discord server

[magic saffron]

If you can find a vulnerability openly discussed online, it's probably been patched (assuming that the person is following proper disclosure rules).

[wispy slate]

That’s what I mean, so it’s extremely unrealistic getting hacked here from unzipping something

[magic saffron]

#1488854565578346677 message
Have you changed your mind about that, then?

[wispy slate]

What? Is this ragebait?

[magic saffron]

No, I'm just confused.

If you're wondering why I found that, I was searching through past messages trying to find the incident that triggered the moderator message I forwarded here above.

[wispy slate]

If I send a jar, with a virus in it, do you expect the normal person to decompile it and look in it?

[magic saffron]

...Yes?

This is a modding server, after all.

[wispy slate]

Okay, I guess then I can always send compiled jars in dms if that’s your reasoning

I oc won’t do that tho lol

[magic saffron]

#general message
And here we have an example of exactly that.

[wispy slate]

Okay, but decompilers are not always 100% accurate too.

[magic saffron]

And here's an example of someone not doing that, and getting got. #discord-suggestions message

[wispy slate]

So you could theoretically hide a virus that’s very hardly visible when decompiling by doing that

[wispy slate]

That’s why I’d rather send the source in a zip than the jar???

What do you even want me to do, send the source, send the jar…

[magic saffron]

I'm not asking you to do anything; I'm asking the original poster to create GitHub repository instead of sending the code as a JAR/Zip.

[wispy slate]

I’d hope that if you download it and compile and run it, you’d at least take a look at every file so then a zip vs GitHub doesn’t make a difference either way

[magic saffron]

I would hope so too.

However, as I showed, a ZIP has a higher risk attached than a GitHub repo does.

[wispy slate]

And Apart from that he expects us to port his compiled jar… but that’s another story

[wispy slate]

The risk is so extremely small from unzipping a zip file that you really shouldn’t care about that

If you just use windows

[magic saffron]

That is indeed another story. Is it the compiled JAR, by the way? It sounded to me like it had errors and wasn't compiling.

[wispy slate]

Nah, it’s a compiled jar

[magic saffron]

That would make things significantly more complicated.

[last crane]

!delete 1496325142731559012 do not post compiled mod jars.