MECCHA CHAMELEON Workshop Maps vs Discord Breach

The sequence the developer published

The official breach update says a system engineer’s spare testing PC was infected while the engineer investigated and patched a malicious mod-map issue. The attacker then bypassed that engineer’s Discord two-factor authentication, took over server permissions and removed official staff.

The same notice says the affected machine could not access or edit game source files, and that it was wiped and reformatted. A separate game-safety post says the game and Discord are not integrated.

What action still makes sense

1. Do not click links or follow “repair” instructions posted by the compromised Discord identity.
2. Get game updates through Steam, not an external executable.
3. Treat a Workshop item, Discord attachment and the base Steam build as different trust surfaces.
4. Recheck the newest official notice before installing an older third-party map recommended in a video or forum post.

Update 3.2.0 says the earlier game version had already been changed to prevent unrelated-file execution. This page attributes that claim; it does not scan your local Workshop library.