Modrinth only checks the mod files on initial review. Afterwards we rely on user reports in order to perform moderation. Unfortunately, there's just no reliable automation to check against Minecraft malware in mods without a lot of false positives, and we don't have human resources to check all of the file uploads.