Meccha Chameleon Steam Workshop Maps Compromised by Malware; Discord Server Breached

Meccha Chameleon, the standout indie sensation on Steam for 2026, has reportedly surpassed 15 million copies sold. However, some players might want to consider running a virus scan soon, as the game’s developers have confirmed an independent report indicating that malware has been spread through various Steam Workshop maps for Meccha Chameleon.

On July 24, an independent researcher named Feint released a report detailing how a community map called Laser Tag Neon, which had passed the workshop review, would unexpectedly open a “command prompt window” and initiate a download of a script designed to install malware on users’ PCs.

‼️ Steam is hosting malware again, this time in a custom map for the game MECCHA CHAMELEON

Loading the map quietly writes a Windows command file into the player’s Documents folder, which then opens PowerShell in an invisible window and tries to download a second script from a… pic.twitter.com/96oK7T8Xxx

— International Cyber Digest (@IntCyberDigest) July 25, 2026

Although the Laser Tag Neon map was quickly removed after Feint’s findings, the researcher later informed that “new malicious maps” had been uploaded in its place. The development team, lemorion_1224, stated that the vulnerability has been addressed with the release of the latest version 3.1.0 update.

Unfortunately, the dev team is facing another hacking-related issue, as a recent announcement on Meccha Chameleon’s Steam page revealed that the official Discord server has been compromised.

“The game itself is not affected. Currently, the official MECCHA CHAMELEON Discord server has been hacked, and we are completely unable to take any action on our end,” the statement explained. “We have already contacted Discord Support and are currently awaiting their response. If the server cannot be recovered, we will set up a new one.”

In a separate update, the developers mentioned that while addressing the malware issue in a MOD map, a system engineer’s PC became infected. According to lemorion_1224, “the hacker bypassed the engineer’s two-factor authentication on Discord, altered the server permissions, and banned all the staff members,” indicating that reclaiming the original Meccha Chameleon Discord server may be unlikely.