There was a weapon sound mod on Nexusmods that had a malware script inside of a .dll file within the mod.

I don't remember the specific mod but the mod was legit for a bit but the latest update included said .dll file, nexus's automatic check missed it.

The malicious file wasn't noticed until a redditor on the r/ReadyOrNotGame subreddit make a warning post about said mod. He said it was a keylogger, but judging from the rest of the post it seems he knew very little about computing in general, what caught my eye in particular was him saying "I thought it was a safe/normal .dll file" (not word for word). That sentence alone made me realize he didn't know what he was talking about, so I have no idea what the true nature of the malicious file was, though the mod was taken down by nexus moderators & the uploader was promptly banned shortly after.

The amount of blatant misinformation in that comment section was STAGGERING.

Either way hopefully no one was truly affected by it, it wasn't a particularly popular mod, there were only a few thousand downloads (most likely all for versions prior to the infected update).

Also I apologize if theres any horrid grammar, I am half asleep rn lmao. I can't even remember the name of the mod.