Inventory_Transaction Packet exploit

Inventory transaction is a packet that clients send out to the server to sync up the inventory. 
This leaves room for issues, such as NBT modification. Multiple hack clients utilize this packet, sending it out with the custom NBT tag such as the one used in the mob vote test server.

Such clients that can use this include but are not limited to...

Horion (Windows)
and
Toolbox (Android)

Most windows hack clients that use inventory transaction are piggybacks (forks) of horion.
Fixing this before the mob vote is high importance as hacking groups may take advantage of it, and gain inspiration from the little stunt discord user USSR did.

This is a description of the packet written by PMK744

 Bound To Server & Client: InventoryTransaction is a packet sent by the client. It essentially exists out of multiple sub-packets, each of which have something to do with the inventory in one way or another. Some of these sub-packets directly relate to the inventory, others relate to interaction with the world that could potentially result in a change in the inventory. It is sent by the server to assumably sync the players inventory with what the server believes is your inventory, however this could be wrong and it is only used so the server can add/remove/update items in the clients inventory. Developers Notes:This could be heavily exploited for things such as duplicating items, giving items, updating items nbt, enchanting items, editing item attributes, etc.