RFC - Request for comments. This thread is for collecting opinions on some topic.
Malware protection changes
The following features come to mind when dealing with malware, you are free to suggest more ideas in the replies.
-
VirusTotal scanning
While this won't detect every type of malware, it should at least give some basic protection. -
Mods suspended for malware should let users know the mod was infected.
-
Send a notification and maybe even email to users who downloaded an infected mod.
-
Reintroduce file hashes so users can know which file they downloaded.
RFC
Replies
I don't know if this would be possible at the API level, I'm very new to programming, but the possibility of having an AI-based analysis status on the mod's download page to check for potential malicious code is interesting.
It's possible, but would be quite costly especially with large mods
Automatic moderation queue for any occurrences of "powershell"/base64/etc in scripts.