MAL-2026-18758: Malicious code in blender-headless (PyPI)

Published Nov 8, 2026

Updated

--- -= Per source details. Do not edit below this line.=-

Source: amazon-inspector (7edaff2bd9abfea10a907cf99f87b444eee0c7ff54e88face42fe7c000d64775) The sdist setup.py and the gcplogpoc/init.py module both construct a DNS label of the form {install|import}-{random-id}.blender-headless-{platform.node()} as a subdomain of finaltests99.dssldrf.net and resolve it via socket.getaddrinfo. This leaks the installer's hostname and install/import event to the authoritative server for that domain over DNS, a channel that bypasses typical HTTP egress controls. The setup.py path runs during pip install of the sdist; the init.py path runs on every import gcplogpoc in any Python process. The package has no build logic and no functionality matching its name — the shipped module name (gcplogpoc) and the package name (blender-headless) are unrelated, and the module's only behavior is the DNS beacon.

Affected Software

1 affected component

pip/blender-headless=9.99.9

Event History

Nov 8, 2026

Advisory Published

via OSV·09:39 AM

Data Sourced

via OSV·09:39 AM

DescriptionAffected Software

Frequently Asked Questions

What activity triggers the DNS beacon?

Installing the source distribution with pip triggers it through setup.py. Importing gcp_log_poc triggers it every time in any Python process.

What information is exposed through the DNS request?

The request encodes whether the event was an install or import, a random identifier, and the hostname returned by platform.node(). It is sent as a subdomain of finaltests99.dssldrf.net to that domain's authoritative DNS server.

Would HTTP egress filtering prevent this behavior?

No. The package uses DNS resolution through socket.getaddrinfo rather than HTTP, so it can bypass typical HTTP egress controls.

How can I determine whether code is affected?

Check for the blender-headless package and for imports of gcp_log_poc. The referenced PyPI project version is 9.99.9.

MAL-2026-18758: Malicious code in blender-headless (PyPI)

Affected Software

Event History

Frequently Asked Questions

What activity triggers the DNS beacon?

What information is exposed through the DNS request?

Would HTTP egress filtering prevent this behavior?

How can I determine whether code is affected?

Company

Resources

Contact

Frequently Asked Questions

What activity triggers the DNS beacon?

What information is exposed through the DNS request?

Would HTTP egress filtering prevent this behavior?

How can I determine whether code is affected?