search

Grantapher / ValheimPlus

A HarmonyX Mod aimed at improving the gameplay and quality of life of the game Valheim.
GNU Affero General Public License v3.0
210 stars 23 forks source link

[BUG] Malicious Links in Config File #56

Closed GitHowitzer closed 3 weeks ago

GitHowitzer commented 5 months ago

Config file for valheim plus is filled with malicious links - I guess the original domain for valheim.plus has been compromised. These links need to be removed.

To Reproduce

Steps for the devs to reproduce the behavior:

  1. Install valheim plus mod
  2. Start Valheim so valheim_plug.cfg file gets created.
  3. Go to installation folder to edit the valheim_plus.cfg file under "\Steam\steamapps\common\Valheim\BepInEx\config".
  4. Search for any valheim.plus links - all are redirected to malicious/malware sites where it tries to install a malware extension.

Expected behavior No malware in any links.

luevano commented 5 months ago

Just noticed this when trying to join the discord again (and then finding out about the v+ reforged)

Stan-Stani commented 4 months ago

A pr removing the links would be simple. I can do it if necessary.

schrer commented 3 months ago

If anyone picks it up: apart from the config file valheim_plus.cfg, there is also a link to the old site in a least these files:

And the about section on the base page of this repository has the link as well, this can only be changed by someone with the right permissions on this repository.

Grantapher commented 2 months ago

Updated in above commit. Also removed zap stuff. Will be in next alpha targeting next stable.

Grantapher commented 3 weeks ago

Released.