Meccha Chameleon has recently been the target of two security incidents: a malware vulnerability within its custom Steam Workshop maps and a hack of its official Discord server. The developer, Haganeiro, confirmed that the vulnerability has been patched and is no longer an issue.
A report detailed how a command prompt window would briefly appear while Steam was downloading custom workshop maps, indicating the presence of a malware dropper. This issue was identified in a map called "Laser Tag Neon," which was later replaced by another map, "Chroma Grid Arena." Haganeiro stated that update 3.1.0 addressed this vulnerability, and the malware is now disabled for affected maps.
The game's official Discord server, which boasts nearly 100,000 users, was also compromised. According to a Steam Community blog post, Discord Support has been contacted, and the team is awaiting a response. If the server cannot be recovered, a new one will be established.
Developer lemorion_1224 explained that the Discord hack occurred when a system engineer's PC was infected with malware while they were addressing the custom map vulnerabilities. The hacker managed to bypass the engineer's two-factor authentication on Discord, alter server permissions, and ban staff members. The affected PC, a backup device, has been wiped and is no longer capable of editing game files. Players have been warned to avoid suspicious links on the compromised Discord server.