Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/10/26 6:30 a.m.•7 views

Malicious code in dsh-plugin-blender-3d (npm)

[email protected] is a new release of a DeepSeek Harness plugin for Blender 3D modeling whose only change from 0.2.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to...

6AI score
SaveExploits0References6Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/26 12:55 a.m.•5 views

Malicious code in dsh-plugin-blender-3d (npm)

[email protected] is a new release of a DeepSeek Harness plugin for Blender 3D modeling whose only change from 0.2.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to...

6.3AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2026/10/26 12:55 a.m.•6 views

MAL-2026-18321 Malicious code in dsh-plugin-blender-3d (npm)

[email protected] is a new release of a DeepSeek Harness plugin for Blender 3D modeling whose only change from 0.2.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder