Overview
- An independent researcher reported that a community map called Laser Tag Neon opened a command prompt and downloaded a script that could install malware, a behavior first disclosed on July 24.
- The infected Laser Tag Neon map was removed but researchers say replacement malicious maps were uploaded to the game's Steam Workshop after the initial takedown.
- The Meccha Chameleon team issued update 3.1.0, which they say patches the custom-map vulnerability and leaves the core game files free of the virus.
- While removing the malicious map a system engineer’s PC was infected, attackers reportedly bypassed the engineer’s Discord two‑factor authentication, changed server permissions and banned staff, and the developers have contacted Discord Support to recover the server.
- Players are advised to avoid unverified Workshop maps, keep antivirus and system backups active, and expect increased scrutiny of Steam Workshop moderation because community content can execute scripts on users’ machines.