When the PolyMC maintainer locked the repository, the rest of the development team (who had been locked out) exercised their rights under open-source licenses. They took the existing code—before the controversial changes—and forked it into a new project: .
There is no confirmed evidence that PolyMC has ever contained malware. The "compromised" label used by some developers at the time referred to the loss of project integrity and trust, not a literal virus. Current Safety Status (2024–2025) polymc safe
In the open-source world, the ultimate check against a rogue maintainer is the "Fork." When the PolyMC maintainer locked the repository, the
The phrase "PolyMC Safe" didn't originate as a technical certification. Instead, it emerged as a frantic search query from thousands of users caught in the crossfire of a developer's political protest. The "compromised" label used by some developers at
The owner deleted the project’s Code of Conduct and "reclaimed" the project, citing political disagreements with other team members.
: Because PolyMC relies on remote "meta files" to download game components, critics argued that a single person having total control creates a "single point of failure" where malicious updates could be pushed without oversight.