The development team behind Meccha Chameleon has issued a critical update following reports that custom maps on the Steam Workshop were being used to distribute malware. Patch 3.1.0, released recently, addresses these vulnerabilities and removes the affected files from the game.

Quick Facts

  • Patch Version: 3.1.0
  • Primary Issue: Malware discovered in "Laser Tag Neon" and "Chroma Grid Arena" custom maps.
  • Discord Status: Owner account compromised; access fully restored and attackers banned.
  • Safety Status: Developers confirm the game is currently virus-free and safe to play.

The issue came to light over the weekend when a community member named Feint published a breakdown detailing how the "Laser Tag Neon" map functioned as a malware dropper. Players reported seeing a command prompt window appear briefly during the map download process in the game’s lobby. Feint later identified that the "Chroma Grid Arena" map was also compromised, despite both maps having passed the initial Steam Workshop review process.

In response to the discovery, developer lemorion_1224 pulled the malicious maps from the workshop. According to official developer communications, the latest patch ensures the malware is disabled and the vulnerability has been rectified.

Discord Security Breach

Alongside the in-game security concerns, the official Meccha Chameleon Discord server was compromised by a third party. Users reported that the server layout had been stripped down to just two channels. The developer confirmed that a bad actor successfully gained unauthorized access to the server owner’s account, resulting in the temporary lockout of all administrative staff.

The developers have since reclaimed control of the server and confirmed that all associated hackers have been banned. As of the latest update, the team reports that normal operations have resumed. While the immediate threats have been neutralized, the studio has advised players to remain cautious regarding unofficial game content.

Player Impact Summary

For the average player, the most important takeaway is to ensure the game is updated to the latest version via Steam to receive the 3.1.0 security fixes. While the developer has verified the game is currently safe, the incident serves as a reminder to exercise caution when downloading or loading custom content from community workshops, as even vetted uploads can occasionally harbor malicious code.