blender-headless

{"schema_version":"1.7.4","id":"MAL-2026-18758","published":"2026-11-08T09:39:34Z","modified":"2026-11-08T14:12:22.251063038Z","summary":"Malicious code in blender-headless (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (7edaff2bd9abfea10a907cf99f87b444eee0c7ff54e88face42fe7c000d64775)\nThe sdist setup.py and the gcp_log_poc/__init__.py module both construct a DNS label of the form `{install|import}-{random-id}.blender-headless-{platform.node()}` as a subdomain of finaltests99.dssldrf.net and resolve it via socket.getaddrinfo. This leaks the installer's hostname and install/import event to the authoritative server for that domain over DNS, a channel that bypasses typical HTTP egress controls. The setup.py path runs during `pip install` of the sdist; the __init__.py path runs on every `import gcp_log_poc` in any Python process. The package has no build logic and no functionality matching its name — the shipped module name (gcp_log_poc) and the package name (blender-headless) are unrelated, and the module's only behavior is the DNS beacon.\n\n## Source: kam193 (da370fd492985ac15dcdcda2445fce49069d7a2b4cf62514806e36d589570fb6)\nInstalling the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: GENERIC-standard-pypi-install-pentest\n\n\nReasons (based on the campaign):\n\n\n - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n","affected":[{"package":{"name":"blender-headless","ecosystem":"PyPI"},"versions":["9.99.9"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["blender_headless-9.99.9.tar.gz"],"path":"setup.py","sha256":"119efb65798bd95fb0449844e5a81803d2da0234c8f69b737748cff989bac08b","tlsh":"4ae02303d2317d465872389508f930100b350a22bf241059b24903116f5a49ec127202"},{"artifacts":["blender_headless-9.99.9.tar.gz","blender_headless-9.99.9-py3-none-any.whl"],"path":"gcp_log_poc/__init__.py","sha256":"796c8469c3408c76dd730380623c5f07379f57d0dc84ab6e0a0055e88e3d8207","tlsh":"e3e07d03e2756c479672358608f830305a7a4511db19082aa55d1751cfa94a88135b20"}],"package_integrity":[{"filename":"blender_headless-9.99.9-py3-none-any.whl","hashes":{"blake2b_256":"ef3bfdc88b266ab84d8ae0c4c10bb53b88adcc35bcc4c7b33c092a60e91114f3","md5":"0abb8989dc3121963a60542c3f79827c","sha256":"6107070c8d998ff8621cabce61f4ef34996618fa89a6cff069d498342c4778ff"}},{"filename":"blender_headless-9.99.9.tar.gz","hashes":{"blake2b_256":"0687939c828b15aec3e8b6c4d9ac1f646f6b4de930e7349b0b236cac61e88cac","md5":"04888566308d3a0c12a999c9a5709591","sha256":"fd91eff7c622ddd33e8e34e6283eb66573faf4d599e8256f26e55f26a0e73a07"}}]}}}],"references":[{"type":"PACKAGE","url":"https://pypi.org/project/blender-headless/9.99.9/"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/blender-headless"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-022566","import_time":"2026-11-08T10:11:09.046299384Z","modified_time":"2026-11-08T09:39:34Z","sha256":"7edaff2bd9abfea10a907cf99f87b444eee0c7ff54e88face42fe7c000d64775","source":"amazon-inspector","versions":["9.99.9"]},{"id":"pypi/GENERIC-standard-pypi-install-pentest/blender-headless","import_time":"2026-11-08T14:10:37.558731596Z","modified_time":"2026-11-08T13:52:34.47182Z","sha256":"da370fd492985ac15dcdcda2445fce49069d7a2b4cf62514806e36d589570fb6","source":"kam193","versions":["9.99.9"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}