JarGuard – Protection against malicious mods
JarGuard checks every mod in your mods folder at startup, before Minecraft loads. If it finds something suspicious, it shows you the file and closes the game.
What it detects
- Loaders that download code or run it in memory
- Session token theft and exfiltration via webhooks
- Disguised language adapters that start before all other mods
- Known patterns of the SilentNet family
- Encrypted data blobs and programs started in the background
- Nested jars and disguised class files
Self-protection
JarGuard verifies each of its own files with SHA-256 and remembers the hash of its jar. If anything was injected or changed, Minecraft won't start.
Notes
- Fabric 1.21.11, Java 21, Fabric API not required
- Allow false positives by adding the jar's SHA-256 to config/aaa_jarguard-allow.txt
- It's a pattern-based scanner and no replacement for antivirus software. Only download mods from trusted sources such as Modrinth or CurseForge.

