How worried should I be about malware

Recently I found a Minecraft mod that had its source on github but a jar file on curseforge. I know for a fact the source is safe, but when I downloaded the jar file and ran it through virustotal 3 of the antiviruses labeled it as malware. I was worried that they published the source of the mod which was safe, but when they published the jar file it had a rat. I told my friend who is a programmer and he said he wasnt worried at all. He never checked the jar file so i tried building from source. It never worked out as for some reason gradle was broken. I decided to go ahead and run the mod from curseforge instead of building from source. Ive been playing for a while but am worried. I uninstalled the mod and ran maldet on my / directory and everything looks fine. One of the devs of the jar is someone i know and he is a nice guy to my knowledge and is a very well known mod dev. What should I do?