MAL-2026-18758

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/blender-headless/MAL-2026-18758.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-18758
Published
2026-11-08T09:39:34Z
Modified
2026-11-08T10:15:04Z
Summary
Malicious code in blender-headless (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (7edaff2bd9abfea10a907cf99f87b444eee0c7ff54e88face42fe7c000d64775)

The sdist setup.py and the gcp_log_poc/init.py module both construct a DNS label of the form {install|import}-{random-id}.blender-headless-{platform.node()} as a subdomain of finaltests99.dssldrf.net and resolve it via socket.getaddrinfo. This leaks the installer's hostname and install/import event to the authoritative server for that domain over DNS, a channel that bypasses typical HTTP egress controls. The setup.py path runs during pip install of the sdist; the init.py path runs on every import gcp_log_poc in any Python process. The package has no build logic and no functionality matching its name — the shipped module name (gcp_log_poc) and the package name (blender-headless) are unrelated, and the module's only behavior is the DNS beacon.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-022566",
            "import_time": "2026-11-08T10:11:09.046299384Z",
            "modified_time": "2026-11-08T09:39:34Z",
            "sha256": "7edaff2bd9abfea10a907cf99f87b444eee0c7ff54e88face42fe7c000d64775",
            "source": "amazon-inspector",
            "versions": [
                "9.99.9"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / blender-headless

Package

Name
blender-headless
View open source insights on deps.dev
Purl
pkg:pypi/blender-headless

Affected ranges

Affected versions

9.*
9.99.9

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "artifacts": [
                "blender_headless-9.99.9.tar.gz"
            ],
            "path": "setup.py",
            "sha256": "119efb65798bd95fb0449844e5a81803d2da0234c8f69b737748cff989bac08b",
            "tlsh": "4ae02303d2317d465872389508f930100b350a22bf241059b24903116f5a49ec127202"
        },
        {
            "artifacts": [
                "blender_headless-9.99.9.tar.gz",
                "blender_headless-9.99.9-py3-none-any.whl"
            ],
            "path": "gcp_log_poc/__init__.py",
            "sha256": "796c8469c3408c76dd730380623c5f07379f57d0dc84ab6e0a0055e88e3d8207",
            "tlsh": "e3e07d03e2756c479672358608f830305a7a4511db19082aa55d1751cfa94a88135b20"
        }
    ],
    "package_integrity": [
        {
            "filename": "blender_headless-9.99.9-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "ef3bfdc88b266ab84d8ae0c4c10bb53b88adcc35bcc4c7b33c092a60e91114f3",
                "md5": "0abb8989dc3121963a60542c3f79827c",
                "sha256": "6107070c8d998ff8621cabce61f4ef34996618fa89a6cff069d498342c4778ff"
            }
        },
        {
            "filename": "blender_headless-9.99.9.tar.gz",
            "hashes": {
                "blake2b_256": "0687939c828b15aec3e8b6c4d9ac1f646f6b4de930e7349b0b236cac61e88cac",
                "md5": "04888566308d3a0c12a999c9a5709591",
                "sha256": "fd91eff7c622ddd33e8e34e6283eb66573faf4d599e8256f26e55f26a0e73a07"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/blender-headless/MAL-2026-18758.json"