---
id: "MAL-2026-18758"
page: "https://infrastack.ai/live/MAL-2026-18758"
kind: "package"
aliases: ["MAL-2026-18758"]
title: "Malicious code in blender-headless (PyPI)"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "blender-headless", "fixed": [], "affected": "= 9.99.9", "ecosystem": "pypi"}]
ecosystems: ["pypi"]
tags: ["malicious", "package"]
not_affected_if: []
published_at: "2026-11-08T09:39:34+00:00"
first_seen_at: "2026-11-08T11:17:07+00:00"
updated_at: "2026-11-08T11:22:57+00:00"
sources: [{"source": "osv-malicious", "url": "https://osv.dev/vulnerability/MAL-2026-18758", "first_seen_at": "2026-11-08T11:17:07+00:00"}]
exploit_sources: []
---

# Malicious code in blender-headless (PyPI)

Link for people: https://infrastack.ai/live/MAL-2026-18758 (this .md is for agents)

## Affected

- pypi:blender-headless affected = 9.99.9 fixed no fixed version listed

## Timeline

- 2026-11-08T11:17:07+00:00 osv-malicious https://osv.dev/vulnerability/MAL-2026-18758

## From the sources

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (7edaff2bd9abfea10a907cf99f87b444eee0c7ff54e88face42fe7c000d64775)
The sdist setup.py and the gcp_log_poc/__init__.py module both construct a DNS label of the form `{install|import}-{random-id}.blender-headless-{platform.node()}` as a subdomain of finaltests99.dssldrf.net and resolve it via socket.getaddrinfo. This leaks the installer's hostname and install/import event to the authoritative server for that domain over DNS, a channel that bypasses typical HTTP egress controls. The setup.py path runs during `pip install` of the sdist; the __init__.py path runs on every `import gcp_log_poc` in any Python process. The package has no build logic and no functionality matching its name — the shipped module name (gcp_log_poc) and the package name (blender-headless) are unrelated, and the module's only behavior is the DNS beacon.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_