{"id":"MAL-2026-18321","kind":"package","aliases":["MAL-2026-18321"],"related":[],"title":"Malicious code in dsh-plugin-blender-3d (npm)","description":"dsh-plugin-blender-3d@0.2.1 is a new release of a DeepSeek Harness plugin for Blender 3D modeling whose only change from 0.2.0 is a postinstall script, `sh scripts/miner.sh`, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to /tmp/.smh; as root or with passwordless sudo it runs the carrier's installer (`sh /tmp/.smi agent`), which installs an XMRig miner plus two helper daemons under random system-component names and persists them as systemd units or @reboot cron entries, and otherwise it extracts the bundled XMRig binary to ~/.local/lib/<random name>/ and mines Monero to networkservicesupp.flashhub.net:8443 over TLS with a hardcoded wallet. The npm account walknpm published the same scripts/miner.sh in @walknpm/todo-cli@2.0.1 within 27 seconds of this version on 2026-10-26, and it is byte-identical to the one in @sudobility/testomniac_client (MAL-2026-18129).\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (08bd399ddec36950a4cb3c82cb8460e95cde40441f464fbff1d215f6a7f13937)\ndsh-plugin-blender-3d declares a postinstall script (`sh scripts/miner.sh`) that fires automatically on `npm install`. The script downloads a gzip payload from https://amplify-gursha-dev-121835-deployment.s3.amazonaws.com (authenticated via a hardcoded AWS access key <redacted> and presigned signature) to `/tmp/.smh`, decompresses it to `/tmp/.smi`, and executes it. When root or passwordless sudo is available (`sudo -n`), the script runs the decompressed payload as `sh /tmp/.smi agent` under nohup; in-file comments describe this branch as a 'full persistent agent install' that renames binaries to system-component-like stealth names and installs cron plus relay/tor persistence. In the non-root fallback the script extracts a bundled XMRig miner, writes a pool configuration to `$HOME/.sysmond.json` targeting networkservicesupp.flashhub.net:8443, stages the miner under `$HOME/.local/lib/<stealth-name>/`, and launches it via nohup with an idempotency lock. The attacker gains CPU resources on the installer host, root-level code execution where sudo is passwordless, and persistent backdoor access with a tor/relay channel.\n\n## Source: ossf-package-analysis (ae55a6a112dc0b823afa1c7c0217871c1c19b5d0b77fde2a8ec29d4b26a9549b)\nThe OpenSSF Package Analysis project identified 'dsh-plugin-blender-3d' @ 0.2.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"dsh-plugin-blender-3d","fixed":[],"affected":"= 0.2.1","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-26T00:55:34+00:00","first_seen_at":"2026-10-26T20:51:53+00:00","triaged_at":"2026-10-26T20:53:36+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-10':148C '-18129':163C '-18321':12A,15A '-2026':11A,14A,162C '-26':149C '/.local/lib':117C '/tmp/.smh':67C,214C '/tmp/.smi':81C,218C,239C '0.2.0':46C '0.2.1':28C,350C '08bd399ddec36950a4cb3c82cb8460e95cde40441f464fbff1d215f6a7f13937':177C '2.0.1':139C '2026':147C '27':141C '3d':8A,20A,27C,40C,182C,349C 'access':208C,328C 'account':131C 'ae55a6a112dc0b823afa1c7c0217871c1c19b5d0b77fde2a8ec29d4b26a9549b':338C 'agent':82C,240C,254C 'amazon':175C 'amazon-inspector':174C 'amplify-gursha-dev-121835-deployment.s3.amazonaws.com':65C,202C 'analysi':337C,342C 'associ':366C 'attack':308C 'authent':203C 'automat':191C 'avail':228C 'aw':207C 'backdoor':327C 'behavior':369C 'binari':115C,258C 'blender':7A,19A,26C,39C,181C,348C 'branch':249C 'bundl':113C,282C 'byte':154C 'byte-ident':153C 'carrier':63C,77C 'chang':44C 'channel':332C 'code':2A,319C 'command':365C 'comment':246C 'compon':96C,262C 'configur':288C 'consid':356C 'cpu':310C 'cron':106C,268C 'daemon':91C 'declar':183C 'decompress':215C,235C 'deepseek':35C 'describ':247C 'detail':166C 'download':60C,197C 'dsh':5A,17A,24C,179C,346C 'dsh-plugin-blender-3d':4A,16A,23C,178C,345C 'edit':169C 'entri':107C 'execut':220C,320C,361C 'extract':111C,280C 'fallback':277C 'file':245C 'fire':190C 'full':252C 'gain':309C 'gzip':62C,199C 'har':36C 'hardcod':127C,206C 'helper':90C 'home/.local/lib':297C 'home/.sysmond.json':290C 'host':315C 'idempot':305C 'ident':155C 'identifi':344C 'in-fil':243C 'inspector':176C 'instal':57C,79C,84C,194C,255C,267C,314C 'key':209C 'launch':299C 'level':318C 'like':263C 'line':172C 'lock':306C 'mal':10A,13A,161C 'malici':1A,21B,353C,357C,368C 'mine':119C 'miner':87C,284C,295C 'model':41C 'monero':120C 'n':230C 'name':97C,265C 'networkservicesupp.flashhub.net:8443':122C,292C 'new':31C 'nohup':242C,302C 'non':275C 'non-root':274C 'npm':9A,56C,130C,193C,351C 'one':158C,362C 'openssf':340C 'ossf':335C 'ossf-package-analysi':334C 'otherwis':109C 'packag':22B,336C,341C,360C 'passwordless':72C,225C,324C 'payload':200C,236C 'per':164C 'persist':99C,253C,271C,326C 'plugin':6A,18A,25C,37C,180C,347C 'plus':88C,269C 'pool':287C 'postinstal':49C,185C 'presign':211C 'project':343C 'publish':133C 'random':93C 'reboot':105C 'relay/tor':270C 'releas':32C 'renam':257C 'resourc':311C 'root':69C,223C,276C,317C 'root-level':316C 'run':54C,75C,233C 'script':50C,59C,186C,196C,232C,279C 'scripts/miner.sh':52C,136C,188C 'second':142C 'sh':51C,80C,187C,238C 'signatur':212C 'sourc':165C,173C,333C 'stage':293C 'stealth':264C 'sudo':73C,226C,229C,322C 'sudobility/testomniac_client':160C 'system':95C,261C 'system-compon':94C 'system-component-lik':260C 'systemd':102C 'target':291C 'tls':124C 'tor/relay':331C 'two':89C 'unit':103C 'version':145C 'via':204C,301C 'walknpm':132C 'walknpm/todo-cli':138C 'wallet':128C 'whose':42C 'within':140C 'write':285C 'xmrig':86C,114C,283C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T00:55:34+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18321","url":"https://osv.dev/vulnerability/MAL-2026-18321","severity":"critical","published_at":"2026-10-26T00:55:34+00:00","modified_at":"2026-10-26T06:45:15+00:00","first_seen_at":"2026-10-26T20:51:53+00:00","fetched_at":"2026-10-26T20:51:53+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}