v0.6.0

0.6.0 (2026-11-07)

Features

• recognize payload build 6ae4f146 (Oct 30 19:34:30 GMT) (67ae59b)

Documentation

• add the code signing policy that SignPath Foundation requires (ee19c13)
• explain the antivirus false positives at the top of the README (b7b7c08)
• say that a code signing request with the SignPath Foundation is under way (a18cb0f)
• warn in red that Defender can quarantine nikke-check (77208d5)

v0.5.2

0.5.2 (2026-11-04)

Fixes

• i18n: rewrite 247 Korean texts in natural Korean (96c69f4)
• scan: count only k2f- and k2f_ files in Temp (435ea38)
• scan: quote a startup failed line only when it ends an agent run (4fa775d)
• scan: recognize the Google Play Games launcher, nikke_launcher_google.exe (2aba144)
• scan: show when the agent loaded but its startup failed (107ae39)

Documentation

• correct the DLL folder and the CDN state (5cb1ad2)

v0.5.1

0.5.1 (2026-11-04)

Fixes

• scan: check the Google Play Games launcher data folder, nikke_launcher_google (8aee685)

v0.5.0

0.5.0 (2026-11-04)

Features

• advise deleting tbs_cache after Level Infinite's fix, and give firewalld and nftables commands (570d8a0)
• scan: read the launcher's login browser profile (AppData\Local\CEF\User Data) (570d8a0)
• ui: put a large "See what to do (N steps)" button under the verdict and ask before closing when the steps were never opened (570d8a0)
• ui: translate the tool into 15 languages and follow the system language (2c2e01e)

Fixes

• scan: report a running launcher as critical only when the scan also finds a sign of the agent (570d8a0)

v0.4.1

0.4.1 (2026-11-04)

Fixes

• scan: count an agent download only when it finished, and know two more builds (51926a2)
• scan: read compressed LevelDB tables when looking for the agent state (8a823d5)

v0.4.0

0.4.0 (2026-11-04)

Features

• scan: make the computer scan quick and keep the full scan as an option (d3c0aab)

Fixes

• scan: know the fifth payload build and the Oct 23 agent start (af2db1c)

Documentation

• describe the quick scan and the full scan (9d23022)

v0.3.0

0.3.0 (2026-11-04)

Features

• scan: find more traces of the agent and of its Chrome DLL (9e9efe2)
• ui: guide players through what was found and what to do (a2d5af0)
• ui: show MotherSphere with a short hint on the start and steps screens (de42825)

Fixes

• scan: rate a log that names only insightjs as a warning (082d130)
• ui: skip OpenGL on Windows so AMD's driver cannot crash the window (b2eda50)

Documentation

• describe the three tabs, the new checks and the report redaction (257a1c7)
• the Chrome DLL does not need Chrome; add the second IP and the fourth build (8eda540)

v0.2.1

0.2.1 (2026-11-03)

Fixes

• report: date the agent from October 24 and fix the DLL removal order (1772cfd)

Documentation

• add vue-bucket.min.js, the October 24 agent starts, payload builds and the Chrome DLL (8b867b2)
• note that drives mounted in a folder are not walked on Windows (f1e0acd)

v0.2.0

0.2.0 (2026-11-03)

Features

• scan: search the whole computer with no depth limit (3679171)

Fixes

• show the window for any item dropped on the .exe (cc25533)

Documentation

• split the README into a docs/ folder and add screenshots (5741c61)

v0.1.0

0.1.0 (2026-11-03)

Features

• add read-only scanner for NIKKE launcher compromise traces (75e5054)
• ui: add a scan screen with live progress, Stop and folder drop (0a70778)

Fixes

• discovery: find more profiles and installs, skip network mounts (0388d40)
• report: correct the dates, the file count and the debug.log advice (054b590)
• scan: tighten detection rules and label log times (76276c3)
• ui: show hosts status per domain and drop stale scan results (8bdc703)

Documentation

• add README (b6abee9)
• describe the new checks, discovery rules and download steps (d1ba5bb)
• describe the new window, the third CDN file and the release files (9f613f3)