Meccha Chameleon Patches Malware Flaw After Discord Hijack

Meccha Chameleon, a multiplayer party game released on Steam in June 2026, lets players distribute custom maps through Steam Workshop. That feature became a security risk after user-made maps were found carrying malware capable of executing unrelated files. The incident shows how community content can turn a popular game’s distribution ecosystem into an attack vector and expose connected services, including a Discord community with more than 100,000 members.

Developer Haganeiro said on July 26 that an engineer’s spare test PC was infected while the team investigated a malicious map. The attacker bypassed Discord two-factor authentication, seized top permissions on the official server and banned its administrators. The map vulnerability was patched in version 3.1.0, and the developers said the Discord server was fully restored on July 27. They said the core game and source files were not compromised, while urging players to avoid unknown links and scan computers that had loaded custom maps.