Because Eaglercraft runs entirely in your browser, a malicious modded client has : cookies, local storage, clipboard, location (if granted), and WebAssembly memory.
| Risk | Likelihood | Impact | |------|------------|--------| | Session hijacking (cookie/token theft) | High | Attacker joins servers as you | | Browser extension-level permissions | Medium | Read data on all sites | | JavaScript keylogger | Medium | Steal passwords entered in browser | | WebRTC IP leak | High | Reveal real IP despite VPN | | Crypto miner embedded | Low-Medium | CPU throttling, battery drain | | Remote code execution (RCE) | Very Low | Full system compromise (rare but possible via browser 0-days) | eaglercraft modded clients
No Java installation, no native executable—just a URL. Because Eaglercraft runs entirely in your browser, a