Unlike Nexus Mods, which runs every single ZIP file through ClamAV or similar, MinorPatch relies on user reports. A malicious actor can upload a mod claiming to fix a game bug that actually contains a keylogger. Because the site is less famous, these files may stay online for weeks until someone reports them.