Godot Engine Exploited to Spread Malware on Windows, macOS, Linux

GodLoader is a cross-platform malware loader that embeds malicious GDScript into Godot .pck game files to deliver payloads (notably RedLine stealer and XMRig), evading detection via sandbox/VM checks and Microsoft Defender exclusions; Check Point Research reports ~17,000 infected machines since June 2024 and warns up to 1.2M Godot users could be at risk, with distribution via many GitHub/Bitbucket repositories and advice to obtain software only from trusted sources.