[Game Update] - 676312

[V2C]

Changes

• Added skin support for Scared Stiff Berry Bushes.

Bug Fixes

• Fixed crash in controller input code.
• Fixed some security issues with the skin API.

View full update

[hhh2]

What's going to happen to those who lost many skins because of the virus?

[_zwb]

5 minutes ago, V2C said:

• Fixed some security issues with the skin API.

is this a klei server side thing?

[Cheggf]

6 minutes ago, V2C said:

Fixed some security issues with the skin API.

what does this mean

[Chesed]

12 minutes ago, hhh2 said:

What's going to happen to those who lost many skins because of the virus?

Klei has audit logs of the transactions and can restore the skins of affected users. They may have to do it manually for each and every person and that would be time consuming for them, but they can get it done. Their priority was just stopping more people from losing skins first.

-----

If anyone is reading this and has lost skins and hasn't already submitted a support ticket directly to Klei, go and do that here: https://support.klei.com/hc/en-us/requests/new  it will be a lot more helpful to you than posting "same!!" on a thread in the forum and hoping Klei sees it.

Edited June 24, 2025 by Chesed

[Cliffford W.]

Note that due to this update mods like Skin Queue are now unusable.

but it's security over mods

Edited June 25, 2025 by Cliffford W.

[Adgycarp]

1 minute ago, Chesed said:

If anyone is reading this and has lost skins and hasn't already submitted a support ticket directly to Klei, go and do that here: https://support.klei.com/hc/en-us/requests/new  it will be a lot more helpful to you than posting on the forum.

Indeed. If someone has lost skins recently, it can also be done through the "transactions" page at their klei accounts, by rolling back all the transactions, aka weaving and unravelling, that the virus has done.
it can be a lot of manual work, but it is one of the possible options.

Thanks klei for fixing the vulnerability 🙂

[Hawthorn]

Hello, will the missing texture issue when storing Moleworms in Scaled Chests be fixed in the next update?

[konijnenmoed]

Glad the skin issue got fixed this fast. (Not gonna lie, I wish they took the chat messages exploit also this serious. Or – if it's fixed in the mean time – would have added to the patch notes when released.)

Edited June 24, 2025 by konijnenmoed

[Cliffford W.]

Apologies skin queue still works. 

They just changed something that prevents certain functions to be exploited

[Lucky star]

Currently, the modules that can automatically decompose skins are no longer valid. So when players buy gift packs, do they have to click to decompose them one by one? Is there a plan to make it an official function?

目前具备自动分解皮肤的模组都已经失效，那么玩家购买礼包，难道要一个一个去点击分解吗，是否有计划将其制作成官方功能？

[Cliffford W.]

It appears my game didn't update so Skin Queue is indeed officialy done for.

[Nosidda]

Is it safe to play the game right now? 

[Dr. Safety]

2 minutes ago, Cliffford W. said:

It appears my game didn't update so Skin Queue is indeed officialy done for.

That's definitely for the best, but I REALLY hope that they add an official similar feature. To mass unravel manually takes way too much time

[Cliffford W.]

4 minutes ago, Nosidda said:

Is it safe to play the game right now? 

For the time being yes it is!

[Lucky star]

20 minutes ago, Cliffford W. said:

For the time being yes it is!

I am attracted by your MOD and I am ready to subscribe to it

我被你的MOD吸引了，准备订阅它

[Nosidda]

35 minutes ago, Cliffford W. said:

For the time being yes it is!

Also is there any information on when Klei official servers are coming back? 

[Cliffford W.]

25 minutes ago, Nosidda said:

Also is there any information on when Klei official servers are coming back? 

That's up to Klei not me

[Cheggf]

2 hours ago, Cliffford W. said:

For the time being yes it is!

This was only on third party servers, right? Not Klei official?

[Cliffford W.]

5 minutes ago, Cheggf said:

This was only on third party servers, right? Not Klei official?

I am not aware which servers it occured on. 

[AliceShiki]

1 hour ago, Cheggf said:

This was only on third party servers, right? Not Klei official?

From what I understood, there was a malicious mod that infected other users within the same server as the person who had the malicious mod, and then the infected player would become a carrier of the malicious mod that could infect more users.

So... Essentially any public server was at risk of having someone with a malicious mod join it and make people start losing their skins.

But Klei has just solved the problem, so it's no longer an issue.

[Cliffford W.]

14 minutes ago, AliceShiki said:

From what I understood, there was a malicious mod that infected other users within the same server as the person who had the malicious mod, and then the infected player would become a carrier of the malicious mod that could infect more users.

So... Essentially any public server was at risk of having someone with a malicious mod join it and make people start losing their skins.

But Klei has just solved the problem, so it's no longer an issue.

It was a custom made command that made client download a mod without the user noticing. 

Nonetheless we no longer need to discuss this. 

[qianxiyu]

I'm very glad that the virus mod incident has been resolved. I hope such malignant incidents will never happen again

[Valase]

I really like the allusion to STDs.
In my country, DST is the acronym for STD, so I can never talk about the game without having to mention its full name!

[alainmcd]

11 hours ago, V2C said:

Fixed some security issues with the skin API.

The updatebeta branch is still open, you'll want to push the fix there too or take it down.