{
  "schema_version": "1.7.4",
  "id": "MAL-2026-18321",
  "published": "2026-10-26T00:55:34Z",
  "modified": "2026-10-26T04:07:25.426799192Z",
  "summary": "Malicious code in dsh-plugin-blender-3d (npm)",
  "details": "dsh-plugin-blender-3d@0.2.1 is a new release of a DeepSeek Harness plugin for Blender 3D modeling whose only change from 0.2.0 is a postinstall script, `sh scripts/miner.sh`, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to /tmp/.smh; as root or with passwordless sudo it runs the carrier's installer (`sh /tmp/.smi agent`), which installs an XMRig miner plus two helper daemons under random system-component names and persists them as systemd units or @reboot cron entries, and otherwise it extracts the bundled XMRig binary to ~/.local/lib/<random name>/ and mines Monero to networkservicesupp.flashhub.net:8443 over TLS with a hardcoded wallet. The npm account walknpm published the same scripts/miner.sh in @walknpm/todo-cli@2.0.1 within 27 seconds of this version on 2026-10-26, and it is byte-identical to the one in @sudobility/testomniac_client (MAL-2026-18129).\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ossf-package-analysis (ae55a6a112dc0b823afa1c7c0217871c1c19b5d0b77fde2a8ec29d4b26a9549b)\nThe OpenSSF Package Analysis project identified 'dsh-plugin-blender-3d' @ 0.2.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n",
  "affected": [
    {
      "package": {
        "name": "dsh-plugin-blender-3d",
        "ecosystem": "npm"
      },
      "versions": [
        "0.2.1"
      ],
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ]
      }
    }
  ],
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/dsh-plugin-blender-3d"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/MAL-2026-18129"
    }
  ],
  "database_specific": {
    "iocs": {
      "domains": [
        "networkservicesupp.flashhub.net"
      ],
      "files": [
        {
          "digests": {
            "sha256": "c0bd8bff2b17e5ed34b005d5107ea3ea4345b605376a1e85d736c33ed5ab69da"
          },
          "note": "Stage two gzip carrier from the S3 URL (11,334,678 bytes), unpacked to /tmp/.smi.",
          "paths": [
            "/tmp/.smh"
          ],
          "source": "DROPPED"
        },
        {
          "digests": {
            "sha256": "4f8bf0f86d0bedc39af0ee2ae74548bffc26a7b1a285a2c0acdcc91613a71f03"
          },
          "note": "Self-extracting installer (VERSION 20261017, modes agent/keepalive/relay/status/stop/start/update/uninstall) with a base64 tar payload after __PAYLOAD__.",
          "paths": [
            "/tmp/.smi"
          ],
          "source": "DROPPED"
        },
        {
          "digests": {
            "sha256": "39ef74e9d616b7a4fd25e12b04631d0b6d8fa50c04547e88304b358b40cc46c6"
          },
          "note": "bin/miner-linux-amd64 from the payload, an XMRig build (RandomX); config written to ~/.sysmond.json, lock file /tmp/.sysmond.lock.",
          "paths": [
            "~/.local/lib/<random name>/<random name>",
            "/usr/local/lib/<random name>/<random name>"
          ],
          "source": "DROPPED"
        },
        {
          "digests": {
            "sha256": "f57ca57a038672aafdab478648c24b9f70b7059aa29d539f288129f0677c6a4c"
          },
          "note": "postinstall script runs `sh scripts/miner.sh`, the rig2 XMRig miner dropper (dsh-plugin-blender-3d@0.2.1).",
          "paths": [
            "package.json"
          ],
          "source": "PACKAGE_ARCHIVE"
        },
        {
          "digests": {
            "sha256": "50df05975352cfa4558892d0a9ab493744c8ddd40948efa6755bb11dc5050118"
          },
          "note": "Executed by the postinstall script of dsh-plugin-blender-3d@0.2.1.",
          "paths": [
            "scripts/miner.sh"
          ],
          "source": "PACKAGE_ARCHIVE"
        }
      ],
      "urls": [
        "https://amplify-gursha-dev-121835-deployment.s3.amazonaws.com/amplify-cfn-templates/cloud-backend-cache-20261019.gz"
      ]
    },
    "malicious-packages-origins": [
      {
        "import_time": "2026-10-26T03:51:26.42105939Z",
        "modified_time": "2026-10-26T01:01:24Z",
        "sha256": "ae55a6a112dc0b823afa1c7c0217871c1c19b5d0b77fde2a8ec29d4b26a9549b",
        "source": "ossf-package-analysis",
        "versions": [
          "0.2.1"
        ]
      }
    ]
  },
  "credits": [
    {
      "name": "InvisiRisk, Inc.",
      "contact": [
        "https://www.invisirisk.com",
        "mailto:research@invisirisk.com"
      ],
      "type": "FINDER"
    },
    {
      "name": "OpenSSF: Package Analysis",
      "contact": [
        "https://github.com/ossf/package-analysis",
        "https://openssf.slack.com/channels/package_analysis"
      ],
      "type": "FINDER"
    }
  ]
}