Meccha Cameleon is a multiplayer hide-and-seek game developed by solo creator Lemorion that surpassed 10 million sales on Steam within 16 days of its June 10 release, but faced a security incident in late July involving malware in mod maps and a hack of its official Discord server.
Meccha Cameleon, a multiplayer hide-and-seek game developed by solo creator Lemorion, launched on Steam on June 10. Within 16 days, it surpassed 10 million sales and earned a Very Positive rating from 83% of 27,869 reviews. On June 27, the game became compatible with GeForce NOW, enabling play on Mac and non-gaming PCs.
In late July, the game faced a security incident. On July 25 and 26, malware was discovered in user-made mod maps on Steam Workshop. Developer Lemorion and Haganeiro released a security patch in version 3.1.0 on July 25 at 21:00, disabling arbitrary code execution in mod maps. Shortly after the fix, the official Discord server was compromised. The server creator's account was hijacked, all administrators were banned, and the hacker posted messages impersonating the DedSec group from Watch Dogs.
Lemorion stated that the game itself is 100% virus-free and that the Discord breach was a separate incident involving a hijacked administrator account, not a game vulnerability. The developer confirmed that the infected PC used for verification was a spare, not a development machine, and has been fully reset. Update 3.2.0, released on July 26, added 12 new emotes and reiterated that game safety has been resolved. Discord support has been contacted, and the server was expected to be restored within 48 hours as of July 26.
Synthesized by Yomimono from the cited Yomimono stories below, each itself
sourced, then editorially reviewed. Every
fact links the story it came from.
Jul 26
The official Discord server for the indie game Meccha Cameleon was hijacked on July 26, just hours after developers released a security patch for malware found in user-created mod maps on Steam Workshop. Developer Lemorion reported that the server creator's account was taken over and all administrators were banned, leaving the team unable to manage the server. The incident began on July 25 when reports surfaced that some custom maps distributed via Steam Workshop contained malware capable of arbitrary code execution. The developers released version 3.1.0 that same day, which included a security patch that disabled malware execution in mod maps. However, during the verification process, one developer's backup PC became infected, leading to the Discord account compromise. The hackers then posted false claims that the game itself contained a Remote Access Tool, which Lemorion denied, stating the game is 100% virus-free. The infected PC was not a development machine, and no evidence of game file tampering was found. The server was restored by July 27, with all attacker accounts banned and a new invite link issued. Meccha Cameleon, a multiplayer hide-and-seek game where players camouflage into scenery, has sold over 15 million copies since its June 10 release.
Jun 27
On June 27, the multiplayer hide-and-seek game Meccha Cameleon became compatible with GeForce NOW, allowing play on Mac and non-gaming PCs. The game, developed by solo creator Lemorion, surpassed 10 million sales on Steam in 16 days since its June 10 release, earning a Very Positive rating from 83% of 27,869 reviews.