ShulkerShopLogin token grabbers
Code that reads your Minecraft access token, the key that lets someone play as you without your password.
Free tool · Rat checker
Shulker Detector
Check a Minecraft mod for rats before you install it. Drop a .jar and it looks inside every class for token grabbers, Discord webhooks, account and password stealers, and hidden downloaders.
Runs in your browser. Your file is never uploaded.
Want to see it work first?
What it checks
Discord webhooks and bots
Links that post into a Discord channel or Telegram bot, the usual way stolen accounts get sent out.
Account and password files
Launcher account files, Discord's local storage, saved browser passwords and cookies, crypto wallets.
Hidden downloaders
Code that loads more code at runtime, Java classes hidden inside text, and links hidden in base64 or reversed.
Programs inside the jar
Bundled .exe files, scripts and native libraries, plus code that starts programs or captures your screen.
Bundled jars too
Every jar packed inside the mod gets opened and checked the same way, up to three levels deep.
We do not condone rats.
A clean result means none of the known rat tricks showed up. It can't promise a mod is safe, since new stealers keep changing. Only download mods from places you trust, like Modrinth or the developer's own site, and never run a mod someone DMs you.