Wallpaper Engine Fixes Steam Workshop Malware Issue for Safer Animated Desktops
Wallpaper Engine has long been one of Steam’s most interesting “make your desktop yours” tools, letting you pull in community-made wallpapers with a few clicks. What makes it stand out is that it’s not limited to still images—many of the Workshop entries are animated, can respond to input, and even include extras such as Spotify support. That community-driven model, though, has also created a serious downside: bad actors have reportedly been abusing the Workshop with “application wallpapers,” a special category of backgrounds that can run an .exe directly on a user’s PC.
To address that threat, the Wallpaper Engine team says it plans to permanently delete application wallpapers from the Steam Workshop. The developers acknowledge the change sounds extreme, but argue it’s only hitting a very small slice of the library—about 0.5% of all wallpapers—and that the real-world number of affected users is even lower. They also point out that the broader audience is largely insulated because application wallpapers are hidden by default inside the app, meaning most people never encounter or use them in the first place.
As part of the same rollout, which is scheduled for “the next week,” the team says it will also be “cleaning up the Workshop.”
To make the transition less painful for anyone currently using this feature, the developers are providing a grace window where users can create a local backup of the application wallpapers they’ve already chosen. This is important because the team says it can’t stop existing Workshop items from being updated in the future. In their view, that means there’s still a pathway for trouble later on: “there is always a risk that the original creator gets their Steam account hacked down the line,” allowing an attacker to “easily push a malicious update to a previously safe and popular wallpaper.” Given that loophole, the team’s conclusion is blunt—complete removal is the only way to ensure a wallpaper can’t suddenly turn from harmless to harmful.
What Is An Application Wallpaper?
The developers describe application wallpapers as “ordinary Windows apps that have full access to your computer.” They’ve been part of Wallpaper Engine since its early days, originally created to let creators experiment freely and build highly customized experiences.
That freedom became a major liability after Kaspersky researchers found that attackers had been embedding harmful software inside Workshop uploads for months. Those compromised entries weren’t just random—they were delivered as legitimate wallpapers, and the malicious payload specifically focused on Steam login credentials while taking control of users’ machines. With that in mind, the team decided that allowing .exe distribution through the app is no longer an acceptable risk.
Subscribe to our newsletter for Wallpaper Engine updates
In response to the malware coverage, the team says the actual impact was limited because of existing safeguards already in place. They also complained that many reports missed the important context and leaned on sensational headlines that exaggerated how widespread the issue really was. “Once those headlines are out there, it becomes a losing battle for us to correct the record and calm things down,” the developers said. They emphasize that even though the danger was tightly contained, the panic was still very real, and they don’t want users to feel uncertain about using Wallpaper Engine.
They reiterate their goal is for everyone to feel completely safe using the software, and that keeping application wallpapers available is no longer compatible with that promise.
