If you haven't seen it, Curseforge put out some detection tools in response to the recent malware discovery.

starship_lizard@lemmy.world to Modded Minecraft@sopuli.xyz – 1 points –
CurseForge Support
support.curseforge.com
2

CurseForge is a lot like Reddit in this aspect: it doesn't really care about the users, at most it reacts to something that annoyed a lot of them to the point that they might leave. So this is probably not the last time that malware found its way to its modpacks.

Modrinth is probably a better alternative for some [all? a few? dunno] users.

I'd argue that they actually responded to this quickly and appropriately. They didn't try to sweep anything under the rug and provided tools to see if you're affected.