#Help seeing if the loggerfactory class in a mod I've downloaded is malicious

1 messages · Page 1 of 1 (latest)

light crown
#

I know all modrinth stuff are safe just still kinda nervous

livid ravine
#

look to see if in the decompile if it states "rat" or "token" if so I wold probably not use it

light crown
#

You can download it and probably use a web decompiler

light crown
livid ravine
#

ok

light crown
#

looks like normal code plus the developer would try to hide it if it was indeed malicious

livid ravine
#

idk

light crown
#

should i just take the risk

#

public class KeyInputHandler {
public static final String KEY_CATEGORY_TOGGLEABLEPIECHART = "key.category.toggleable_piechart";
public static final String KEY_TOGGLE_PIECHART = "key.toggle_piechart";
public static final String KEY_TOGGLE_SETTINGS = "key.toggle_roo_settings";
public static class_304 togglePieChartKey;
public static class_304 toggleRooSettingsKey;

public static void registerKeyInputs() {
ClientTickEvents.END_CLIENT_TICK.register((client) -> {
if (togglePieChartKey.method_1436()) {
if (ToggleablePieChart.PieChartX == -1.0D) {
ToggleablePieChart.PieChartX = (double)class_310.method_1551().method_22683().method_4480();
ToggleablePieChart.PieChartY = (double)class_310.method_1551().method_22683().method_4507();
}

        ToggleablePieChart.renderPieChart = !ToggleablePieChart.renderPieChart;
     }

     if (toggleRooSettingsKey.method_1436()) {
        ConfigurationScreen screen = new ConfigurationScreen();
        client.method_1507(screen);
     }

  });

}

public static void register() {
togglePieChartKey = KeyBindingHelper.registerKeyBinding(new class_304("key.toggle_piechart", class_307.field_1668, 80, "key.category.toggleable_piechart"));
toggleRooSettingsKey = KeyBindingHelper.registerKeyBinding(new class_304("key.toggle_roo_settings", class_307.field_1668, 75, "key.category.toggleable_piechart"));
registerKeyInputs();
}

this just looks like normal keybind handlers

#

yet i'm scared

#

Could anyone help?

#

resolved

obtuse peak
#

in the future you can just look at the source code on the linked github page
And if you still don't trust it, you can build it from source yourself after looking through and confirming there's nothing wrong with it

#

Keep in mind that if a mod is closed-source, and you decide to decompile it and upload code snippets, that's probably not a good idea. The mod you picked though is open-source and MIT licensed so that's fine...?

light crown
#

i mean if it would want to be closed source you couldve just obfuscated it

#

but yes, thank you

obtuse peak