I'm part of a discord that provides mod's an such for a game. So far things have been pretty smooth, downloads an whatnot, no issues is what I mean. Well anyway, Friday one of the files was flagged with a keylogger Trojan. I figured this would happen sooner or later since it's a fairly new game..

My question though is: Should I post the find?

* I already reached out to the admin as well as the owner and the reply was they would look into it. It didn't seem like a good idea to be calling people out since I'm still new there and getting folks all riled up doesn't help. Well, it's Sunday and the file is still available for users to download. There's been no precautionary information for users, no recommendations, etc. Considering it's one of the more popular mods, there's more than likely going to be a lot of hits. An up-and-coming Youtuber also installed the mod for testing while going Live on his channel. I don't want a pat on the back, I just think it's wrong to not address the issue asap. I provided video footage as well as images and the longer this goes on the more suspicious I get.

Microsoft Windows
Version 2004 (OS Build 19041.329)