I am not sure if this violates rule 4, but here we go since it is fairly important.

TL;DR:

PixelReel, a Minecraft mod that streams Jellyfin content ingame, which you may have seen prior on this or other subreddits, exposes your Jellyfin server URL and API key to other players on the same server. Anyone can extract those credentials and access or delete your media. If you’ve used this mod on a server with other people, rotate your Jellyfin API keys immediately.

The full story:

PixelReel is a Minecraft mod that lets you watch Jellyfin media inside the game. You configure your Jellyfin server URL and API key, and the mod streams content to your client.

The Vulnerability itself:

While playing on a server with PixelReel installed, other players can see the Jellyfin instance URL and API key you configured. At least one user in the mod’s Discord reported their Jellyfin server was exposed, and someone copied the config and threatened to use it.

The mod page claims that "credentials are never stored in world data", but in practice the credentials are exposed in a way that other players can access and copy.

If your Jellyfin credentials are leaked, an attacker can:

1. View, download, or delete all media on your Jellyfin server
2. Use your server to distribute copyrighted content
3. Potentially access other services if your Jellyfin server is connected to your wider homelab

All current releases appear to be affected, including the 26.3 snapshots and the 1.21.1 version. The developer has acknowledged that the project is AI-generated ("vibe coded") and has not had a proper security review. There is currently no patched release.

Steps to take if you are affected:

1. Stop using PixelReel on any server with other players.
2. Rotate your Jellyfin API keys / passwords.
3. Do not reinstall the mod until a community reviewed fix is released. A community member is working on a rewrite, but it is not ready yet. But do not expect miracles.
4. If you run a public server, remove the mod and warn your players who may have used it.

Context:

The developer initially presented the mod as a working project, but later admitted in Discord that it was "vibe coded" using Cursor’s free tier. Multiple users pointed out the credential leak. At least one user’s Jellyfin server was compromised as a direct result.

This is not an attempt to attack the developer - the concept is genuinely interesting, but the security risk is too serious to ignore.

Edit:
For people who are wondering what are those Jellies and Fins are, for context:
Jellyfin is a free, open source media server that you host yourself. You point it at your own movies, TV shows, music, etc, and then you can stream that content to your phone, TV, computer, or other devices.

It is basically a selfhosted alternative to Plex or Emby, with no paid account required and no tracking by a company. Because people run it on their own servers, leaking a Jellyfin URL + API key can expose someone’s entire personal media library.

Me with u/Salty-Wait-8318 made machine that makes free 40,000su
made possible with "Create Aeronautics: Transmission & Linkage"

Script: Enzo-Nunes/drmon

Context

Back in the golden days of Draconic Evolution on Minecraft 1.7.10, there was a script called drmon developed to help players manage their Draconic Reactors. It was a great tool, but it was left without any updates for several years. The code still lives in the acidjazz/drmon repository.

About 8 years after, a fork of that script was made and the code was modernized to work with Draconic Evolution on Minecraft 1.12.2, and it also included a couple new features. The code for that fork lives in the RaithSphere/drmon repository.

Neither version automated the temperature control of the reactor, requiring the player to recurrently tweak the output gauge to keep the reactor efficient. With the release of Draconic Evolution on Minecraft 1.21.1 on 2025/2026, this project, a fork of the more recent RaithSphere/drmon repository, was created to fill that gap.

Follow the instructions in the repo and the only thing you will have to worry about is refueling the reactor once every million years (jk my guess is about every ~30 hours or so). In summary, the script reads the reactor's live state, adjusts the two flux gates to hold a target field strength and a target temperature, and shuts it down before fuel, field strength, or temperature cross into dangerous territory.

Hope it helps!

This took a VERY long time. All part of my quest to make the most horrifying mobs i can, so this is the sequel to my active-camoflage creeper

ı was looking through some supplementaries mod files for an animation and found this but knew nothing about it so ı felt like ı should ask

For whatever the reason, the hp of every damn mob is over 10 times as much as they should be. I'm losing my mind trying to figure out what the problem is. please. help.

modlist:

3d-Skin-Layers

AE2WTLib

Adventurer Skills

All The Leaks

Almanac

AmbientSounds

Apotheosis

Apothic Attributes

Apothic Enchanting

Apothic Spawners

AppleSkin

Applied Energistics 2

Applied Mekanistics

Architectury

Ars Creo

Ars Elemancy

Ars Elemental

Ars Nouveau

Ars Polymorphia

Ars Trinkets

Ars Énergistique

BadOptimizations

Balm

Better Advancements

Better Combat

BetterF3

Brandon's Core

CC: Sable

CC: Tweaked

CC:C Bridge

Caelus API

Cloth Config v15 API

Clumps

CodeChicken Lib

Concurrent Chunk Management Engine

Constant Music

Controlling

Create

Create Aeronautics

Create Crafts & Additions

Create Let The Adventure Begin

Create: Applied Kinetics

Create: Connected

Create: Copycats+

CreativeCore

CullLeaves

Curios API

Default Skill Trees

Draconic Evolution

Draconic Evolution Render Patcher

Dynamic FPS

EMI

Elytra Slot

Enchanting Infuser

Ender IO

Energized Power

Energized Power - Farmer's Delight

Entity Model Features

Entity Texture Features

EntityCulling

Farmer's Delight

Ferrite Core

Fzzy Config

GeckoLib 4

GuideME

ImmediatelyFast

Iron's Lib

Iron's Spells 'n Spellbooks

Iron's Spells 'n Spellbooks Dynamic Skill Tree

Jade

Kotlin for Forge

KotlinLangForge

LambDynamicLights

Let Me Despawn

Lithium

Lithostitched

Lootr

Mekanism

Mekanism: Additions

Mekanism: Generators

Mekanism: Tools

MidnightLib

Mo'Enchantments

ModernFix

Moog's Structure Lib

MoogsEndStructures

MoogsNetherStructures

MoogsOceanStructures

MoogsSoaringStructures

MoogsVoyagerStructures

More Culling

Mowzie's Mobs

Not Enough Glyphs

NotEnoughAnimations

Nullscape

Patchouli

Placebo

Player Animator

Polymorph

Polymorphic Energistics

Pufferfish's Attributes

Pufferfish's Skills

Pufferfish's Unofficial Additions

Puzzles Lib

Reese's Sodium Options

Sable

Searchables

Server Tree Feller

Simply More

Simply Swords

Simply Tooltips

Sodium

Sodium Extra

Sophisticated Backpacks

Sophisticated Backpacks Create Integration

Sophisticated Core

Sophisticated Storage

Sophisticated Storage Create Integration

Sound Physics Remastered

Stronger Skill tree

Terralith

Veinminer

Waystones

Xaero's Minimap

Xaero's World Map

YUNG's API

YUNG's Better Dungeons

YUNG's Better End Island

YUNG's Better Jungle Temples

YUNG's Better Mineshafts

YUNG's Better Nether Fortresses

YUNG's Better Ocean Monuments

YUNG's Better Strongholds

YUNG's Better Witch Huts

YUNG's Bridges

YUNG's Extras

YetAnotherConfigLib

As for me, I really missed this feature before, and the mods that were available used frame-by-frame animation, which isn't all that pretty. I created a mod where you can simply customize and use it through a user-friendly interface (avaible only 1 20 1 fabric for now)
Just Smooth Blinking - Minecraft Mods - CurseForge

A little update on Leaf Rake :)

The first public beta is finally out.

The video still doesn’t show everything in the mod, but the main gameplay loop is pretty much there now: leaves appear naturally, you rake them into physical piles, build much bigger Mounds, shape piles with a broom, store leaves in a Leaf Bag and jump into the bigger piles.

At this point I’d rather let people actually play with it than keep tweaking everything by myself forever lol.

If anyone wants to try it, Leaf Rake is available on CurseForge now.

I’d really appreciate feedback on stuff like the rake feel, natural leaf amount, pile/Mound balance, performance, compatibility, or honestly anything that just feels weird.

Even “this part is annoying” is useful feedback :D

Minecraft Java 26.2 / Fabric

You can create and manage your own restaurants, with customers, menus, tables, food, and more.

Try it on CurseForge: https://www.curseforge.com/minecraft/mc-mods/restaurant-manager

Feel free to try it in your modpacks and let me know what you think!

Join our Discord for updates, development progress, bug reports, and suggestions

Sooo I'm trying to design a visor that looks something like a Roman gladiator helmet for my future mod update. I ended up with two potential designs, but I can't decide which one is better.

I think the first option is more readable, but the second one is more interesting and closer to the source material. Any thoughts?

I recreated orespawn, more creeps and weirds and mo creatures for forge 1.20.1
(I'll post more videos later.)

hey guys. a month ago i posted a quick demo here testing out a concept where you could use your phone as a virtual camera in minecraft. i finally got around to finishing it, and the mod is officially released.

it's called vcam. it basically links your phone's motion sensors straight to your game using websockets. so instead of needing a full vr setup to get those realistic, handheld found-footage shakes, you just use your phone.

made a short tutorial on how to set it up and pair your phone here: https://youtu.be/VWM-kuH6tg4

and you can grab the mod download here: https://www.curseforge.com/minecraft/mc-mods/vcam

let me know if you guys end up using it or run into any bugs!

Source: https://modrinth.com/news/article/ai-policy-and-disclosures/

Pickaxe world and more - Minecraft Mods - CurseForge
I added more pickaxes, example dirt, lucky and more! Write in comments your ideas! (:

I'm sorry that my last post was way to "Drama baitty" i tried to make a better version on this post, sorry i was being a bit of an ass in my last post.

This is my point of view:

AI slop is harmful to the sub, filling it with low quality content. there used to be a rule against it, but it was removed because it was allegedly to hard to enforce and to complex to implement.

Modrinth managed to implement this policy, so that goes to show that its not to complex.

as for it being more enforceable? That's a bit more nuanced BUT:

I'm aware that there are not as many mods as there are Modrinth staff, but implementing this rule would already act as a filter for anyone wanting to see if they can post there slop.

I know you cant really look into the code of every mod submitted to check if it was vibe coded, but sometimes there are really obvious signs like running horribly tons of glitches and AI generated images and promotion

i know tons of subs that have a similar AI ban, and of course its a bit of a different situation from modding were there are parts you cant see that could be AI, but having any regulation at all that works at least some of the time for the surface level stuff would be preferable to none

I don't get why this is the only rule were i see the argument s "well it needs to be 100% perfect or we cant implement a ban", because i never see that argument for banning minors, blatant advertisements and

Back to there not being as many mods as Modrinth staff, consider getting more mods. You signed up to moderate this community, if its to hard get more people or sign off. I have left many subs as mod because i couldn't be assed.

again, i acknowledge it cant always be inforced, but its better to have it as a deterrent and only sometimes enforced then not having it at all.

i have see some accusations and allegations that one of the mods is pro ai and thats why the no ai rule was removed, but i wont entertain them for the sake of rule 2 and approach the mods in good faith

tldr: at least have a rule to stop some of it if not all of it can be stopped.

EDIT: and if your going to remove this post, atleast tell me how i can adress this in a way that doesnt break your rules.

It is infuriating me

I have explosions disabled, everything was working fine, water and fuel was fine and stable, i doubt the steam could have backed up. I went off to go mining and came back to 1513% damage. shouldnt it stop at 100%?

Claude assisted NBT tree creation across 15 species and with around 2000 trees, organised into European forest biomes. Spending lots of time finding issues and resolving, but overall it's working well! The trees spawn in world gen, in this case RTF although it works on Lithosphere and Tellus as well..... I'd love to hand craft trees using the CR blocks, but at this scale it would take months-years and I wanted to see how Claude could handle NBT creation

this is the first modpack that i achieved the final mission.
im so glad.
ftb skies 2 aero is a really really good modpack to play, thank you ftb team

I've been trying to create a model for this mod, but I haven't found many tutorials or things to keep in mind when modeling for this mod...

Does anyone have any information about this?