AI Generated Image
The biggest indie "friendslop" game of 2026 appears to be delivering malware via Steam Workshop - How to protect your PC (and what to do next)
Windows Central • • technology
Key Points:
- Security researcher Feint has uncovered malicious scripts hidden in some custom user-created maps for the popular PC indie game Meccha Chameleon, which automatically execute upon map loading.
- The malicious maps inject a batch file into players' Documents folders and launch hidden PowerShell processes to download further scripts from external servers, posing a serious malware risk.
- The suspicious maps come from newly created Steam accounts with disabled comments and ratings, making it difficult for users to identify and report the threat.
- Valve has been notified about the issue, but no official action has been confirmed yet; players are advised to avoid unreviewed Meccha Chameleon Workshop maps and scan their PCs for malware if they have recently downloaded custom content.
- This incident highlights ongoing challenges with Steam Workshop security, following a recent malware outbreak in another popular Steam app, Wallpaper Engine.
