Can add-ons hack your sentence password

Some do. Some don't. It's just one of those problems with downloading. Anything can contain a virus. The best thing to do is download add-ons from a trusted site. I recommend www.curse.com