As for what you can do to avoid falling victim to such attacks, it would be prudent to only download mods from known, trusted publishers. If you're prompted to download a mod from GitHub, be very ...