User-created maps for the indie game Meccha Chameleon were found to contain malware, coinciding with a breach of the game's official Discord server. The developer responded with clarifications and a patch.
The indie game Meccha Chameleon faced issues over the weekend when independent researcher Feint reported malware in Steam Workshop maps. One map called Laser Tag Neon was removed after analysis showed a malware dropper, followed by another titled Chroma Grid Arena.
Developer Lemorion_1224 stated the game itself contains no malware. The claims originated from a hacker who compromised a single admin account on the official Discord server.
The breach occurred while investigating the maps, infecting a system engineer's PC. The hacker bypassed two-factor authentication and banned official staff.
On Saturday the developer released patch version 3.1.0 to address the vulnerability. The Discord server was restored earlier today, with the game having sold 15 million copies in one month.
