{"id":"MAL-2026-18758","summary":"Malicious code in blender-headless (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (7edaff2bd9abfea10a907cf99f87b444eee0c7ff54e88face42fe7c000d64775)\nThe sdist setup.py and the gcp_log_poc/__init__.py module both construct a DNS label of the form `{install|import}-{random-id}.blender-headless-{platform.node()}` as a subdomain of finaltests99.dssldrf.net and resolve it via socket.getaddrinfo. This leaks the installer's hostname and install/import event to the authoritative server for that domain over DNS, a channel that bypasses typical HTTP egress controls. The setup.py path runs during `pip install` of the sdist; the __init__.py path runs on every `import gcp_log_poc` in any Python process. The package has no build logic and no functionality matching its name — the shipped module name (gcp_log_poc) and the package name (blender-headless) are unrelated, and the module's only behavior is the DNS beacon.\n","modified":"2026-11-08T10:15:04.066155950Z","published":"2026-11-08T09:39:34Z","database_specific":{"malicious-packages-origins":[{"versions":["9.99.9"],"id":"IN-MAL-2026-022566","import_time":"2026-11-08T10:11:09.046299384Z","modified_time":"2026-11-08T09:39:34Z","sha256":"7edaff2bd9abfea10a907cf99f87b444eee0c7ff54e88face42fe7c000d64775","source":"amazon-inspector"}]},"references":[{"type":"PACKAGE","url":"https://pypi.org/project/blender-headless/9.99.9/"}],"affected":[{"package":{"name":"blender-headless","ecosystem":"PyPI","purl":"pkg:pypi/blender-headless"},"versions":["9.99.9"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"sha256":"119efb65798bd95fb0449844e5a81803d2da0234c8f69b737748cff989bac08b","tlsh":"4ae02303d2317d465872389508f930100b350a22bf241059b24903116f5a49ec127202","artifacts":["blender_headless-9.99.9.tar.gz"],"path":"setup.py"},{"path":"gcp_log_poc/__init__.py","sha256":"796c8469c3408c76dd730380623c5f07379f57d0dc84ab6e0a0055e88e3d8207","tlsh":"e3e07d03e2756c479672358608f830305a7a4511db19082aa55d1751cfa94a88135b20","artifacts":["blender_headless-9.99.9.tar.gz","blender_headless-9.99.9-py3-none-any.whl"]}],"package_integrity":[{"filename":"blender_headless-9.99.9-py3-none-any.whl","hashes":{"sha256":"6107070c8d998ff8621cabce61f4ef34996618fa89a6cff069d498342c4778ff","blake2b_256":"ef3bfdc88b266ab84d8ae0c4c10bb53b88adcc35bcc4c7b33c092a60e91114f3","md5":"0abb8989dc3121963a60542c3f79827c"}},{"filename":"blender_headless-9.99.9.tar.gz","hashes":{"blake2b_256":"0687939c828b15aec3e8b6c4d9ac1f646f6b4de930e7349b0b236cac61e88cac","md5":"04888566308d3a0c12a999c9a5709591","sha256":"fd91eff7c622ddd33e8e34e6283eb66573faf4d599e8256f26e55f26a0e73a07"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/blender-headless/MAL-2026-18758.json"}}],"schema_version":"1.9.2","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}