Hello. I need a serious and urgent explanation. Why are the plugins included in your "DonutSMP Premium" setup putting a virus on my server?
Every time I start my server using your .jar files (DonutAuction, DonutShop, DonutSell, etc.), my server gets infected with the l/M/x Trojan. My security plugins (nLogin and ajLeaderboards) throw critical alerts and shut down the plugin loader because they detect the malware spreading.
I believe this review is based on a misunderstanding, and I would like to clarify the situation.
First, I noticed that you did not contact me directly before posting this review. I actually tried reaching out to you on Discord to explain everything and provide proof, but I did not receive a response. I’m always happy to help resolve concerns when someone contacts me.
Regarding the points you mentioned on my discord server's chat and here:
1. Obfuscation (Skidfuscator)
The plugins are obfuscated using Skidfuscator. This is a very common practice in plugin development to protect the code from piracy and unauthorized redistribution. Many developers use obfuscation for this purpose, and it does not indicate malware.
2. Discord Webhook
The Discord webhook you detected is a normal feature of the plugin. In the configuration file, it can be enabled or disabled. It simply sends notifications (for example, when an auction is created or when a buy/sell action occurs).
3. SQL / Database Connection
The plugin creates a .db file inside its own plugin folder to store auction data and player information. This is completely normal and is how most plugins handle data storage.
4. HTTP Requests
The plugin makes a request to verify the license. This is a normal license validation process and comes from a trusted source.
You mentioned checking the plugin using an automated analysis tool. Those tools often flag normal development practices (such as obfuscation, webhooks, database usage, or license verification) as potential risks, but that does not mean the plugin is malicious. It simply means those elements exist in the code.
To verify this further, I also tested the plugin using PluginScanner (https://scan.rikonardo.com/) and Claude, where Claude also checked it by decompiling and by doing various tests, and you can also check this by yourself. The results clearly showed that the flagged items were related to license verification and bStats analytics, both of which are standard and safe components used in many Minecraft plugins.
My intention has always been to provide safe and high-quality products. The setup is already being used by many servers without any issues.
If you still have concerns, please feel free to contact me directly or open a support ticket. I would be more than happy to walk through everything with you and resolve any doubts.
It's awesome!
The premium features are overwhelming at first but you'll get used to it pretty quickly.
The amount of settings, configs etc. you can tweak is just mind-blowing and awesome
I tested so many plugins before and I have to say that this one rly blows my mind
Buenas quisiera que me ayuden con algo
1. Quiero cambiar el diseño de los mapas, pero no los encuentro solo esta el loby quiero personalizar los mapas
2. me podrian compartir las animaciones ya que son varias que no tienen permiso, por ejemplo en el juego cuando hace click en el cucho no reproduce la animacion se queda estatico y no lanza el cuchillo o hace algun movimiento. y otras muchas mas animaciones
Increíble producto. Va súper fluido y está optimizado. Lo que si estaría bien sería agregar en el RAR algún tipo de notas con instrucciones para los usuarios que no son tan experrtos
Es un producto INCREÍBLE. Las estrellas no son estáticas y puedes moverte dentro de ellas con la cámara libre
El soporte es magnífico, atiende tan pronto como puede. Me apoyo en el mismo día
Hiya! Wondering how I can replace the avatars "Rod Shop" and "Fisherman". Also I cannot get the dance animations to work?
My Discord is: mysticalkioshin
You have to download plugins for NPC Replacement for Rod Shop & Fisherman (Bring Forward the script to the new NPC), Try to find Animation Files in the folder and Upload the ID to make it work
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.
I believe this review is based on a misunderstanding, and I would like to clarify the situation.
First, I noticed that you did not contact me directly before posting this review. I actually tried reaching out to you on Discord to explain everything and provide proof, but I did not receive a response. I’m always happy to help resolve concerns when someone contacts me.
Regarding the points you mentioned on my discord server's chat and here:
1. Obfuscation (Skidfuscator)
The plugins are obfuscated using Skidfuscator. This is a very common practice in plugin development to protect the code from piracy and unauthorized redistribution. Many developers use obfuscation for this purpose, and it does not indicate malware.
2. Discord Webhook
The Discord webhook you detected is a normal feature of the plugin. In the configuration file, it can be enabled or disabled. It simply sends notifications (for example, when an auction is created or when a buy/sell action occurs).
3. SQL / Database Connection
The plugin creates a .db file inside its own plugin folder to store auction data and player information. This is completely normal and is how most plugins handle data storage.
4. HTTP Requests
The plugin makes a request to verify the license. This is a normal license validation process and comes from a trusted source.
You mentioned checking the plugin using an automated analysis tool. Those tools often flag normal development practices (such as obfuscation, webhooks, database usage, or license verification) as potential risks, but that does not mean the plugin is malicious. It simply means those elements exist in the code.
To verify this further, I also tested the plugin using PluginScanner (https://scan.rikonardo.com/) and Claude, where Claude also checked it by decompiling and by doing various tests, and you can also check this by yourself. The results clearly showed that the flagged items were related to license verification and bStats analytics, both of which are standard and safe components used in many Minecraft plugins.
My intention has always been to provide safe and high-quality products. The setup is already being used by many servers without any issues.
If you still have concerns, please feel free to contact me directly or open a support ticket. I would be more than happy to walk through everything with you and resolve any doubts.
Thank you.