diff --git a/code/__HELPERS/logging/antagonists.dm b/code/__HELPERS/logging/antagonists.dm
index c66fc8437e1..38f88b3b4d6 100644
--- a/code/__HELPERS/logging/antagonists.dm
+++ b/code/__HELPERS/logging/antagonists.dm
@@ -8,6 +8,11 @@
 	if (CONFIG_GET(flag/log_uplink))
 		WRITE_LOG(GLOB.world_uplink_log, "UPLINK: [text]")
 
+/// Logging for upgrades purchased by a malfunctioning (or combat upgraded) AI
+/proc/log_malf_upgrades(text)
+	if (CONFIG_GET(flag/log_uplink))
+		WRITE_LOG(GLOB.world_uplink_log, "MALF UPGRADE: [text]")
+
 /// Logging for changeling powers purchased
 /proc/log_changeling_power(text)
 	if (CONFIG_GET(flag/log_uplink))
diff --git a/code/modules/antagonists/traitor/equipment/module_picker.dm b/code/modules/antagonists/traitor/equipment/module_picker.dm
index 001f4434652..faf82461847 100644
--- a/code/modules/antagonists/traitor/equipment/module_picker.dm
+++ b/code/modules/antagonists/traitor/equipment/module_picker.dm
@@ -122,4 +122,5 @@
 				action.desc = "[initial(action.desc)] It has [action.uses] use\s remaining."
 				action.UpdateButtons()
 	processing_time -= AM.cost
+	log_malf_upgrades("[key_name(AI)] purchased [AM.name]")
 	SSblackbox.record_feedback("nested tally", "malfunction_modules_bought", 1, list("[initial(AM.name)]", "[AM.cost]"))