This is a confused and frankly worthless article. It is malware made in Godot. It is not targeting users of Godot, it is not distributed through Godot-related channels, nothing got "hijacked" (except perhaps the infected systems).

The researchers talk about the possibility that data packs for real games could be infected in the future, but this malware just includes its own copy of the game engine.

Post by the researchers: https://research.checkpoint.com/2024/gaming-engines-an-undet...

Statement by Godot: https://godotengine.org/article/statement-on-godloader-malwa...