About mods... are there people who scan to see if there's malware in mods? (might be stupid, but a concerned friend wanted this asked)

[Blue (battle berry)]

as said on the tin, I need to know this so I can at least have some official notice of the fact "Vintage story has such a niche fan base that no one puts viruses in the mods" because a friend of mine had their identity stolen and they were talked to by federal agents due to activities someone did when that person stole my friend's identity. Hopefully, even screenshots that show there's no viruses in our modding community (because I know that we're too small a game to have viruses in our mods, unlike some other block game...)

[Thorfinn]

Most mods are just JSON files. Open 'em up and read them before you "install" them if you are curious. I usually do. They are almost as easy to understand as COBOL. 

Of course it's possible that a mod in C could be a problem. The most common exploits might be tough to catch if you don't understand pointers and buffer overflows. Most such would get found really quickly. If you are worried, skip anything released only as a .dll.

As for anything "official" I doubt you will find anything like that. It would take too much effort to fully vet every change uploaded every day.

As with anything else, you can always run VS on a virtual machine, and limit which files it can access. If someone manages to steal your "identity" you are putting way too much information on the 'tubes.

[StCatharines]

1 hour ago, Thorfinn said:

Most mods are just JSON files. Open 'em up and read them before you "install" them if you are curious. I usually do. They are almost as easy to understand as COBOL. 

Of course it's possible that a mod in C could be a problem. The most common exploits might be tough to catch if you don't understand pointers and buffer overflows. Most such would get found really quickly. If you are worried, skip anything released only as a .dll.

As for anything "official" I doubt you will find anything like that. It would take too much effort to fully vet every change uploaded every day.

As with anything else, you can always run VS on a virtual machine, and limit which files it can access. If someone manages to steal your "identity" you are putting way too much information on the 'tubes.

What he said. I tend to skip .dll mods, because I have no way to quickly look them over.