CurseForge is a lot like Reddit in this aspect: it doesn’t really care about the users, at most it reacts to something that annoyed a lot of them to the point that they might leave. So this is probably not the last time that malware found its way to its modpacks.

Modrinth is probably a better alternative for some [all? a few? dunno] users.