Multiple sources are reporting that popular projects on CurseForge might have been compromised. Avoid downloading anything from CurseForge for the time being and check if you might be already affected.
Read our blog post for more information: https://prismlauncher.org/news/cf-compromised-alert/
@PrismLauncher meanwhile this is how curseforge is handling the situation