Caution
From 2026-09-27 to 2026-11-03, two official JavaScript files on Level Infinite's CDN contained attacker code. The NIKKE PC launcher loads these files. From around Nov 2-3, opening the launcher could install a remote-control agent: while the launcher was open, the attacker could run any command on your machine, read any file and take screenshots.
Update, 2026-11-03 17:35 GMT: Level Infinite replaced both files at 17:04 and 17:21 GMT. The loader code is gone. This does not undo anything on machines that were already infected, and the old file may still be in your launcher's cache. Do not open the NIKKE PC launcher until Level Infinite confirms the fix, and clear its cache before you do.
This report comes from one infected machine. The payload was analyzed statically and never executed. Everything below was checked against the downloaded files, the launcher's logs and caches, and the live servers.
Last updated: 2026-11-03, 18:45 GMT