[US] I think that my friend got hacked on Discord. They're wanting me to download a CurseForge plugin for Minecraft

A user's friend received a suspicious Discord message requesting them to download a CurseForge plugin for a Minecraft server. The sender's account may be compromised, as the request involves an unverified ZIP file and JSON file that showed no results on VirusTotal. The user is unsure if this is a scam or a legitimate request.