Malicious user-made Steam Workshop maps for Meccha Chameleon were found to exploit a vulnerability that could install malware on players’ computers when a map was launched. The incident matters because it shows how seemingly legitimate community content can be used to compromise users, although the developer says the game itself was not infected and the vulnerability has been fixed.

One identified map, Laser Tag Neon, was removed, while reports indicated that another malicious map appeared afterwards. During the investigation, a system engineer’s computer was reportedly infected and the attacker used this to take over the game’s official Discord server, bypassing two-factor authentication and removing staff access; players were warned not to trust links or announcements from that server.