sort blacklist entries & expand docs a bit

Author: Pathoschild

src/SMAPI.Toolkit/Framework/ModBlacklistData/ModBlacklistEntryModel.cs

@@ -6,13 +6,15 @@ public class ModBlacklistEntryModel
     /*********
     ** Accessors
     *********/
-    /// <summary>The manifest IDs to block (if any).</summary>
+    /// <summary>The manifest <c>UniqueID</c> values to block (if any).</summary>
     public string? Id { get; }
 
     /// <summary>The MD5 hash of the entry DLL to block (if any).</summary>
+    /// <remarks>This should be omitted if the <see cref="Id"/> is sufficiently unique, to block all versions of a mod.</remarks>
     public string? EntryDllHash { get; }
 
     /// <summary>A player-friendly explanation of why the mod is blocked and what they should do next.</summary>
+    /// <remarks>This should usually reuse one of the existing messages for consistency.</remarks>
     public string? Message { get; }
 
 

src/SMAPI.Web/wwwroot/SMAPI.blacklist.json

@@ -1,59 +1,60 @@
 {
     /**
-     * Metadata about malicious or harmful SMAPI mods which are blocked by default.
+     * Metadata about malicious or harmful SMAPI mods which are blocked by default. This doesn't contain mods blocked
+     * due to compatibility issues; see metadata.json for that.
      *
-     * This doesn't contain mods blocked due to compatibility issues; see metadata.json for that.
+     * See `src\SMAPI.Toolkit\Framework\ModBlacklistData\ModBlacklistModel.cs` for the format info.
     */
     "Blacklist": [
         // 2025-07
         {
-            "Id": "OpUlarenous.PortableCommunityCenter", // 'Even Better Portable Community Center' by OpUlarenous (Nexus:35601; dfd9e53ee3e6fb997c04a2b0c7f49a50, malicious reupload of legit mod)
+            "Id": "OpUlarenous.PortableCommunityCenter", // 'Even Better Portable Community Center' by OpUlarenous (Nexus:35601, dfd9e53ee3e6fb997c04a2b0c7f49a50; malicious reupload of legit mod)
             "Message": "It downloads malicious code from a remote server and runs it on your computer. SMAPI refused to load the mod, but you should delete this mod and run a complete anti-malware scan of your computer now to be safe."
         },
         {
-            "Id": "BrEvoiultion.GiveSpeedInMorning", // 'Give Speed In Morning' by BrEvoiultion (Nexus:35650; 97860c755192a27cdb6c16ec32327774, malicious reupload of legit mod)
+            "Id": "BrEvoiultion.GiveSpeedInMorning", // 'Give Speed In Morning' by BrEvoiultion (Nexus:35650, 97860c755192a27cdb6c16ec32327774; malicious reupload of legit mod)
             "Message": "It downloads malicious code from a remote server and runs it on your computer. SMAPI refused to load the mod, but you should delete this mod and run a complete anti-malware scan of your computer now to be safe."
         },
 
         // 2026-04
         {
-            "Id": "BritishW.ChaosWhispers", // 'Chaos Whispers' by BritishW (Nexus: 44497; 381A5A9892E6699D9DB1A8E2517A9A91)
+            "Id": "BritishW.ChaosWhispers", // 'Chaos Whispers' by BritishW (Nexus:44497, 381a5a9892e6699d9db1a8e2517a9a91)
             "Message": "It downloads malicious code from a remote server and runs it on your computer. SMAPI refused to load the mod, but you should delete this mod and run a complete anti-malware scan of your computer now to be safe."
         },
         {
-            "Id": "BritishW.TheStardewDoppelganger", // The Stardew Doppelganger by BritishW (Nexus: 44345; F0D1636288CB0877441D3F08134FC2CF)
+            "Id": "DweDweD1.GhostCompanion", // 'GhostPet' or 'Ghost Companion' by DweDweD1 (CurseForge:1500648, 85dc32c81407d801fc58cad39a4e1542; Nexus:44342, c95364ba4634fef7826df261712e885d)
             "Message": "It downloads malicious code from a remote server and runs it on your computer. SMAPI refused to load the mod, but you should delete this mod and run a complete anti-malware scan of your computer now to be safe."
         },
         {
-            "Id": "DweDweD1.GhostCompanion", // 'Ghost Companion' by DweDweD1 (Nexus:44342; c95364ba4634fef7826df261712e885d)
+            "Id": "DweDweD1.MusicPlayer", // 'Music Player' by DweDweD1 (Nexus:44488, 159093613f4f62001db88c3078ee5c99)
             "Message": "It downloads malicious code from a remote server and runs it on your computer. SMAPI refused to load the mod, but you should delete this mod and run a complete anti-malware scan of your computer now to be safe."
         },
         {
-            "Id": "DweDweD1.MusicPlayer", // 'Music Player' by DweDweD1 (Nexus:44488; 159093613f4f62001db88c3078ee5c99)
+            "Id": "BritishW.TheStardewDoppelganger", // The Stardew Doppelganger by BritishW (Nexus:44345, f0d1636288cb0877441d3f08134fc2cf)
             "Message": "It downloads malicious code from a remote server and runs it on your computer. SMAPI refused to load the mod, but you should delete this mod and run a complete anti-malware scan of your computer now to be safe."
         },
 
         // 2026-09
         {
-            "Id": "StardewLabs.StardewEssentials", // 'Stardew Essentials' by Hallowqueen/StardewLabs (CurseForge:1670031; 709c4ad894f1fdd8c41fe91a63ed6da8 (2.1.0), d04b1ff874f12193eef0360cdd7e5141 (2.1.1))
+            "Id": "StardewLabs.StardewEssentials", // 'Stardew Essentials' by Hallowqueen/StardewLabs (CurseForge:1670031, 709c4ad894f1fdd8c41fe91a63ed6da8 (2.1.0) + d04b1ff874f12193eef0360cdd7e5141 (2.1.1))
             "Message": "It downloads malicious code from a remote server and runs it on your computer. SMAPI refused to load the mod, but you should delete this mod and run a complete anti-malware scan of your computer now to be safe."
         },
         {
-            "Id": "User.StardewSprint", // 'StardewSprint' by Hallowqueen (CurseForge:1674030; d71a32b947aa35df2eb701c0299101b0 (1.0.0), d467df7a77eb2d1c8075943a48adb22c (1.1.0), ead306d003d2fb64348add02e162de9b (1.2.0), 2721a2536655f6e425ed0f760a3487dc (1.3.0))
+            "Id": "SwitchPosty.StardewSpaceAge", // 'Stardew: Space Age' by SwitchPosty (Nexus:50051, ac3266c5b45f6c514128280f4618604c)
             "Message": "It downloads malicious code from a remote server and runs it on your computer. SMAPI refused to load the mod, but you should delete this mod and run a complete anti-malware scan of your computer now to be safe."
         },
         {
-            "Id": "SwitchPosty.StardewSpaceAge", // 'Stardew: Space Age' by SwitchPosty (Nexus:50051; ac3266c5b45f6c514128280f4618604c)
+            "Id": "User.StardewSprint", // 'StardewSprint' by Hallowqueen (CurseForge:1674030, d71a32b947aa35df2eb701c0299101b0 (1.0.0) + d467df7a77eb2d1c8075943a48adb22c (1.1.0) + ead306d003d2fb64348add02e162de9b (1.2.0) + 2721a2536655f6e425ed0f760a3487dc (1.3.0))
             "Message": "It downloads malicious code from a remote server and runs it on your computer. SMAPI refused to load the mod, but you should delete this mod and run a complete anti-malware scan of your computer now to be safe."
         }
     ],
 
     /**
-     * Metadata about individual files which are known to be malicious, and should be blocked.
-     * If any file in a folder matches an entry, the entire folder is considered malicious.
+     * Metadata about individual files which are known to be malicious, and should be blocked. If any file in a folder
+     * matches an entry, the entire folder is considered malicious.
     */
     "LooseFileBlacklist": [
-        // 2026-01: 'Alchemistry' (ModDrop:1731397, malicious reupload of legit mod)
+        // 2026-01: 'Alchemistry' (ModDrop:1731397; malicious reupload of legit mod)
         {
             "Name": "Auto_Alchemistry.bat",
             "Hash": "8b749727775689a05cc92ab4d624ab8b",