Players can now safely return after Meccha Chameleon's malicious custom map incident.

Meccha Chameleon developer Haganeiro has confirmed that a recent malware exploit involving custom maps and the subsequent hack of its official Discord server have now been resolved. The developer says the game remains safe to play after patching the vulnerability and regaining control of its community server.

The latest updates follow several days of concern, after malicious custom maps were found distributing malware and the game's official Discord server was briefly taken over by an attacker while the development team responded to the issue.

Meccha Chameleon

Release date: 9 June, 2026

Platform: PC via Steam

Developer: lemorion_1224 and Haganeiro

Which Meccha Chameleon custom maps were affected by malware?

The issue first came to light after players reported suspicious behaviour while downloading certain custom maps from Meccha Chameleon's Steam Workshop. Medium user Feint later investigated the incident, finding what appeared to be a malware dropper hidden inside a Workshop upload despite having passed Steam's review process.

"A couple of my friends reported seeing a command prompt window briefly appear while Steam was downloading a custom workshop map … What I found was a seemingly ordinary workshop map that contained what appears to be a malware dropper, despite having passed workshop review," Feint wrote.

The original investigation identified a map called Laser Tag Neon before Feint later updated the post to say it had been replaced by another map, Chroma Grid Arena.

Is it safe to play Meccha Chameleon?

Haganeiro confirmed on X that Update 3.1.0 had patched the vulnerability affecting custom maps. "The vulnerability in the custom maps described in today's update 3.1.0 has been fixed, so there are no issues after applying it," the developer wrote. "We have also confirmed that the malware is disabled for the affected maps both before and after the update.

In a subsequent Steam Community update, Haganeiro further reassured players that the game itself had never been compromised, after the Discord group was breached. "To get straight to the point: The game itself is 100% SAFE and virus-free," they clarified.

Why was Meccha Chameleon's official Discord hacked?

While responding to the malware incident, the devs also found themselves dealing with another security breach after the game's official Discord server was compromised. Haganeiro explained in a Steam post that the Discord breach occurred while the team was investigating and patching the malicious custom maps.

According to the developer, a system engineer's PC became infected with malware during the investigation. The attacker then bypassed the engineer's Discord two-factor authentication, took over the server's permissions and banned all official staff members from the server.

At the time of the update, the developer also warned that whoever briefly controlled the Discord server could continue posting fake announcements or unofficial Discord invitations. The developer urged players not to click suspicious links, join fake servers or follow instructions shared through the compromised Discord.

Is Meccha Chameleon's official Discord back online?

The warning was short-lived, however, as Haganeiro later confirmed it had regained control of the server. In a follow-up Steam Community update published on 27 July, Haganeiro confirmed that the official Discord server had been fully restored.

“The official Discord server has been restored. All the hackers have been banned.” The developer also shared a new invite link for players wishing to rejoin the official community.

With the custom map vulnerability patched and the official Discord server restored, Haganeiro says players can safely continue playing Meccha Chameleon while following future updates through its official channels.