bedrock-pack-tools is built for legitimate use: security researchers, server operators auditing their own deployments, and pack authors recovering keys to their own content. It authenticates as a normal Minecraft Bedrock client using your own Xbox Live account. It is not for redistributing someone else's paid content.
Only the latest released v3.x receives fixes. Please update and
confirm the issue still reproduces before reporting.
Please report security issues privately, not in a public issue:
- Preferred: Security → Report a vulnerability on GitHub (opens a private advisory).
- Otherwise, open a minimal issue without exploit details and ask for a private channel.
Include the version (bedrock-pack-tools version), your OS, and clear
reproduction steps. Expect an initial response within a few days.