Malicious Code Hidden in Steam Workshop Map for Meccha Chameleon

Researchers discovered a map uploaded to Steam Workshop for the game Meccha Chameleon. The map contained hidden code that acted as a malware dropper. When users downloaded and opened the map, the malicious payload was executed. Analysis showed the dropper delivered a trojan that could compromise the system. The incident highlights the risk of third‑party content in game mod platforms. Steam’s moderation process failed to detect the malicious file before release. Users are advised to verify the source of workshop items before installing. The platform may tighten review procedures to prevent similar attacks.