Play AI-made game mashups on Linux.
smog is a free, open-source launcher and catalog for AI-made mashups (think Minecraft running inside GTA V) and decomp and recomp native ports. Every build is screened for malware and approved by a person before it is listed. You bring the games you own.
The Linux launcher is on its way.
The catalog and its signed index are already public, so you can see what will be one click away. The AppImage will appear here and on the download page as soon as the first build passes testing.
In the catalog
Nothing has cleared screening yet.
The first ports and mashups are in review right now. Each one gets a full scan and a human sign-off before it shows up here, so this takes a little while.
Know a project that belongs here? Submit it and it joins the queue.
How safety screening works
Mashups inject code into games you paid for. That is exactly what malware does, so nothing gets listed on trust. Every version of every entry goes through these checks, in this order. Automation can throw a build out at any step. Only a person can let one in.
Published entries are rescanned every week as signatures update, and again whenever upstream ships a new version. A new upstream version is never promoted on its own: it goes back through the whole pipeline while the launcher keeps serving the last approved one.
-
Provenance
GitHub API, artifact attestations
Who made it and where the file came from: repository and account age, how fast the stars arrived, whether the release was built by CI from a tagged commit, whether binaries are signed. A brand-new account with viral stars is a red flag.
-
Antivirus and pattern rules
ClamAV with extra signatures, YARA
Known malware, plus rules for the things that tend to hide in game mods: Discord and browser token stealers, crypto miners, download-and-run droppers and known injector families. A hit here is an automatic rejection.
-
What the program can do
Mandiant capa, packer and entropy checks
A game mod has no reason to read saved passwords, start itself at login or open its own network connections. Those capabilities get flagged. Heavy protectors such as Themida or VMProtect are rejected outright.
-
Reputation
VirusTotal hash lookup
We look up the file's hash against dozens of engines. We never upload files automatically, because uploading publishes them.
-
Source review
Semgrep rules, LLM code review
The source (or the diff since the last approved version) is read for network calls, file access outside the game folder, obfuscation, install scripts and code fetched at runtime. The findings go into the report the reviewer reads.
-
A person approves it
Required for every entry and every version
A human reads the full report, checks the license and the credit, and approves or rejects. Nothing reaches the catalog any other way.
A signed catalog
The catalog is signed with minisign (Ed25519). The launcher has the public key built in and refuses any catalog that fails the check or is older than one it has already seen, so a compromised server cannot push a bad list.
A kill switch
If something turns out bad after publishing, it goes on the revocation list. Every launcher disables it at its next catalog refresh (at start and every six hours) and tells you why. It never deletes your files without asking.
You must own the games
smog never hosts game files, ROMs or disc images. A mod that runs inside GTA V needs your copy of GTA V from Steam. A native port needs a ROM you dumped from your own cartridge.
When an entry asks for a file, the launcher checks its hash on your machine and copies it into place. The file never leaves your computer.
Free and open source
The launcher, the catalog format, the screening pipeline and this site are open source. There are no accounts, no ads and no telemetry. Test reports from the launcher are opt-in and only say whether a game worked on your setup.
Every entry credits its creators and links to their repository. If you made something listed here and want it changed or removed, tell us.