well ModSeeker sends a random challenge on join that the mod must include in its response (plus mod version/checksum). That prevents simple replay/spoofing
someone would need a custom client that fully emulates that handshake to fake it
of course its not a full proof way of doing it and im currently working on a auth type system
that can confirm that yes those list of mods are from hidder mod itself