108
Steam game mod breached to push password-stealing malware (Downfall, Slay the Spire Mod)
(www.bleepingcomputer.com)
For PC gaming news and discussion. PCGamingWiki
Rules:
Steam was not even involved. This didn't affect the Steam version.
The publisher got pwnd and the malware got pushed out over Steam. No different from someone publishing a malicious game directly.