Saying it is "fixed" would be misleading. It's not a problem with a silver bullet that will ever get completely resolved. This is something that has happened with basically every game with modding at some point in it's life cycle, often multiple times.

The ones that got caught were removed, and people who downloaded them notified.

It's not an ongoing thing, but it could happen again in the future, though it's extremely unlikely. If it concerns you just avoid using brand new mods from unknown authors, give it a few days and let a few hundred/thousand other people check it out first. You can subscribe, just give it some time before enabling it.

Since the game has been on Steam I think there's only been the one case of somebody uploading malware mods here (though there have been a couple other cases with people intentionally corrupting saves or crashing the game with their mods). Nothing has changed to make that more or less possible, if a game has modding that allows code to run it's always going to be a risk. It's very illegal though and Valve can and will get law enforcement involved, people have been arrested for uploading malicious mods to Steam, not many people are going to take that risk.

Originally posted by Astasia:

It's not an ongoing thing, but it could happen again in the future, though it's extremely unlikely. If it concerns you just avoid using brand new mods from unknown authors, give it a few days and let a few hundred/thousand other people check it out first. You can subscribe, just give it some time before enabling it.

Since the game has been on Steam I think there's only been the one case of somebody uploading malware mods here (though there have been a couple other cases with people intentionally corrupting saves or crashing the game with their mods). Nothing has changed to make that more or less possible, if a game has modding that allows code to run it's always going to be a risk. It's very illegal though and Valve can and will get law enforcement involved, people have been arrested for uploading malicious mods to Steam, not many people are going to take that risk.

It is most certainly still an ongoing thing, you must always be cautious with what you download. Malware will always be an issue and Steam hasn't done much about it.

Originally posted by Clown:

It is most certainly still an ongoing thing

Source? I haven't seen any evidence that anyone has been actively uploading malicious mods to the RimWorld workshop recently.

Somebody did so a few months ago, a sticky was made, people were posting the names of the mods so anyone affected would know. The person behind it got banned a few times and either moved on or got a scary legal notice and stopped. It's been quiet since with no other updates or named mods.

Originally posted by Clown:

Steam hasn't done much about it.

Steam can't really do anything beyond what it does. Anything uploaded to the workshop is scanned, and the servers themselves are scanned regularly. What is happening in certain games is somebody uploads a mod that tells the game to connect to a server and from that server it downloads and runs the malware. This is out of Steam's control. Ludeon could change how mods work to prevent server access, but that would break a number of mods that depend on server access like the multiplayer mods or stuff like Real Ruins.

Originally posted by S_Draco_S:

some months ago appeared some mods in the workshop that malware on them. Has this problem been fixed? Or is still going on or more malicius mods have show up? any updates?

What mods? I have mods of around that time in a local installation. But several antivirus tools haven't detected anything.

They were caught and deleted, so what they were is irrelevant now. For future reference, if a private profile uploads a mod that is strikingly similar or outright identical to one that already exists, and it is the first mod said profile has uploaded, treat it with extreme caution - there will always be exceptions, but the overwhelming majority of the troublesome mods were by such individuals.

Originally posted by henk:

What mods? I have mods of around that time in a local installation. But several antivirus tools haven't detected anything.

They are named in the sticky about this, it's a couple mods all the way back in like May that were only on the workshop for a very brief period of time. IIRC AV wouldn't detect anything since they don't contain malware, the mod tells the game to download 'malware" when you run it. I think I remember them saying that was what was going on in the discord but it was quite a while ago.