Warning: Some malicious client mods are stealing passwords
When you install a mod, the mods gets full access to your computer, and can do ANYTHING to it.
Make sure you absolutely trust the source before installing any such mods.This applies to both server mods and client mods.
I don’t know which mods are the culprits.
When the modding support is added, there will be support for sandboxing mods to give them less access to important stuff. You can chose to trust a mod if you want to, and if it needs to do fancy things, but the default will be to run the mod sandboxed.