Malicious Mods Found on RimWorld Steam Workshop, Official Warning Issued
The incident highlights a growing security risk on the Steam Workshop where malicious actors re-upload stolen mods with hidden malware, and the community manager warns that detection requires code inspection.
Reporting from 1 sources: Game Spark.
Two malicious mods, CameraSettingsMod and Mad Skills Rewritten, were confirmed on the RimWorld Steam Workshop. The official Discord warned users to delete them, verify game files, and run virus scans. The mods were removed but reportedly steal from other creators and download malware. The warning notes it is hard to judge mods without checking code.
Two malicious mods have been confirmed on the RimWorld Steam Workshop, prompting an official warning from the game's community manager on the official Discord. The mods, CameraSettingsMod and Mad Skills Rewritten, were removed from the Workshop but are said to steal mods from other creators, bypass user protections, and download malware. The warning advises users who enabled them to delete the mods, verify game file integrity, and run virus scans.
The announcement noted common traits among the malicious accounts: they publish only one mod, have level 0 Steam profiles, and keep profiles private. However, the warning cautions that not all mods meeting these conditions are harmful and asks users not to harass mod creators. The community manager stated it is difficult to determine if a mod is harmful without downloading and checking the code, as malicious accounts continuously create new accounts.
Synthesized by Yomimono from the 1 cited source below, including Japanese-language reporting where cited, then editorially reviewed before publishing.