Bug Malware in Unity Hub 3.1.0 (WITH-LOVE-FROM-AMERICA.txt)

I upgraded Unity Hub to v 3.1.0, and a text file appeared on my desktop called "WITH-LOVE-FROM-AMERICA.txt". I am certain this came from Unity Hub, because others were complaining in:
- this reddit thread
- this forum thread
- this forum thread.

[EDIT] Upon researching, it seems this is 'hacktivism' intended to show vulnerabilities. Looks like there is more information in this Github Repo.

 

ditto

 

Almost clicking update button, dude thx

 

Just installed and this comes to my desktop.

 

Just updated and the file showed on my desktop. C'mon guys, I almost wiped all my pc because of it!

 

Today is my shipping day and this happens...I almost formatted my pc.

Seriously

WTF!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

I removed the file and doing a full system scan.

Unbelievable. No official comment from Unity?

 

I got this too, bad job Unity.

 

I also go it. Not particularly happy about this.

 

Same. Now have problems with work PC. Thanks, Unity Tech...

 

Let's not exaggerate this. This could've been bad if it was malware, but it's not. Apart from that file getting added to your desktop, nothing else happens.

https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability

 

If you live in Russia, it overwrites your hard drive with a heart emoji.

 

I got this in June 2023. I use multiple desktops and it appeared on one I don't usually use because there's nothing on it. Glad to know it's not malicious.