Downloading a mod (Satchel) directly from a link with no hash is inherently dangerous since the hash cannot be verified. By doing this, you assume the risk of a bad actor replacing the file. Please update your mod dependencies as soon as you are able to do so.