Do with this information what you will, but they will out of nowhere post stuff like that, and reddit links go nowhere, they are just making up posts and lying about their origin

If you've played modded Minecract Java this year, you need to drop everything and manually check for malware that your antivirus won't catch. Several Curseforge and Bukkit accounts were compromised and used to inject the first stage for a new malware into existing Minecraft mods and modpacks.

https://prismlauncher.org/news/cf-compromised-alert/

https://hackmd.io/B46EYzKXSfWSF35DeCZz9A

They replaced the price tag with qr codes.

https://twitter.com/jusanzz/status/1665782084189790208?t=u-W_MCprALyYAycccivU3Q&s=19