User-made maps from Steam top-seller Meccha Chameleon have been found to contain malware, just as the game’s official Discord server got hacked

← Back to the feed

User-made maps from Steam top-seller Meccha Chameleon have been found to contain malware, just as the game’s official Discord server got hacked

Eurogamer · 3 hours ago

Meccha Chameleon, one of Steam's biggest hits of 2026, suffered a rough weekend after user-created Steam Workshop maps for the game were found to contain malware, coinciding with a separate hack of the game's official Discord server. An independent researcher, "Feint," discovered a malware dropper embedded in a map called Laser Tag Neon after a friend spotted a command prompt briefly appearing during download; a second infected map, Chroma Grid Arena, appeared soon after the first was removed. Developer Lemorion_1224 confirmed the game itself was not compromised, clarifying that a hacker's claim that an official update contained a Remote Access Trojan was false and stemmed from the unrelated Discord breach.

The developer explained that a system engineer's PC was infected with malware while investigating the malicious maps, allowing a hacker to bypass the engineer's Discord two-factor authentication, seize server permissions and ban all staff from the official Discord. Both flagged maps have since been removed, and a patch (version 3.1.0) was released to fix the vulnerability enabling the malware and other bugs; the Discord server has now been restored. Players who downloaded the affected maps before patching are advised to run a full malware scan. Meccha Chameleon has sold roughly 15 million copies in its first month on sale.

  • Meccha Chameleon Workshop maps contained malware, prompting a fix
  • Game's official Discord was separately hacked via an infected engineer's PC
  • Patch 3.1.0 released; affected maps removed and Discord restored

Cybersecurity Entertainment Gaming Software Technology Trending Weird & Viral

Read the full article at the source →