5
If you haven't seen it, Curseforge put out some detection tools in response to the recent malware discovery.
(support.curseforge.com)
CurseForge is a lot like Reddit in this aspect: it doesn't really care about the users, at most it reacts to something that annoyed a lot of them to the point that they might leave. So this is probably not the last time that malware found its way to its modpacks.
Modrinth is probably a better alternative for some [all? a few? dunno] users.