The PC version of Goddess of Victory: Nikke is under scrutiny after players and independent researchers reported a supply chain attack on the official launcher. Reports indicate that malicious code was inserted into several JavaScript files hosted on Level Infinite’s content delivery network. These files load automatically whenever the PC launcher starts.

Timeline and Who Is Affected

The modifications date back to September 27, 2026. From late October onward (reports point to October 23–24 or November 1 at the latest), some launches of the launcher could download and run a remote-access tool. This did not happen on every startup, so some users who opened the client may be unaffected while others are at risk. The mobile version of the game is not involved in these reports.

What the Malware Can Do

According to the technical analyses, the malware allows an attacker to run commands on the computer, access and download files, and take screenshots while the launcher is open. It also targets saved browser passwords, session cookies, Windows credentials, SSH keys, various API tokens, and data from numerous cryptocurrency wallets. On Windows, the tool can install a DLL that continues running through Chrome even after the launcher is closed. Linux users running the launcher via Proton, including on Steam Deck, face similar exposure.

How to Check for Infection

Players can check for signs of compromise by opening the launcher log file (typically under the install path in NIKKE\Launcher\intl_service\debug.log) and searching for the string “k2f_chan”. Other indicators include a PlatformExperienceHelper folder inside Chrome’s User Data directory containing a specific DLL, or a matching registry entry. Community guides provide detailed step-by-step checks. The presence of the log entry alone does not always confirm full infection.

Current Status

As of November 4, 2026, some of the altered files on the CDN have been replaced with clean versions, and the attacker’s server has gone silent. However, this does not remove the malware from any computer that already received it, and cached files may still be present. Neither Shift Up nor Level Infinite has issued an official public statement on the matter.

Recommended Steps for PC Players

  • Do not open the Nikke PC launcher until an official confirmation that the issue is resolved.
  • If you have used the PC client recently, check the log and other indicators.
  • If indicators are found, uninstall the game thoroughly, run full antivirus scans, and change important passwords and credentials from a separate clean device such as a phone.
  • Enable two-factor authentication where possible and log out of active sessions on critical accounts.

Final Notes

This situation highlights the risks of supply chain attacks even on official game clients. PC players should remain cautious and prioritize device security while waiting for further information from the publisher.