RE MOD THE SIMS: The compromised files have all been removed. However, you can’t tell that from the “Information” tab, and I advise using that tab before downloading files so you know whether there’s a script file. The owner of the site has added a feature to check IP addresses of creators logging in. I do not consider this equivalent to using two-factor authentication, and it’s likely to lock out creators who’s IP address changes for valid reasons. I am not yet satisfied enough with the situation at MTS to recommending downloading new mods or updated mods from there, and I will not be reporting updates to MTS-only mods for the time being. If you’re a creator who posts only to MTS, get a second place to host your mods.
ADDITIONAL WARNING RE. 18+ MODS: Another malicious mod, from a different website, has been identified. This is an 18+ mod and I will not be naming it here.
INSTALL MODGUARD. The identification was made because a player had installed TwistedMexi’s Modguard in their Mods folder. Modguard helps protect you from some kinds of compromised files and it sends info about compromised files when it detects them, so that we can tell everyone else about them. Download Modguard from the TwistedMexi website or from Curseforge.
PRACTICE SAFE MOD/CC SOURCING. Because this issue has now spread to multiple mod hosts, be extra cautious about what you download. That includes new mods/CC from new creators, new files from long-inactive creators, files updated with no info where there usually is some, files uploaded to a new site for that creator, CC with non-package files, etc., etc. Read my advice on “Safe Simming” in the pinned “How to” post: https://forums.ea.com/discussions/the-sims-4-mods-and-custom-content-en/re-info-how-to-use-mods-and-cc/9360654
