CERT24MAL-2026-18321 — Malicious code in dsh-plugin-blender-3d npm packageLoading data…
CERT24Threat Observatory
Period

MAL-2026-18321 — Malicious code in dsh-plugin-blender-3d npm package

OpenSSF Package Analysis identified npm package dsh-plugin-blender-3d version 0.2.1 as malicious. The version adds a postinstall script that runs during npm install and downloads and executes cryptocurrency-mining-related code.

← Back to intelligence

MAL-2026-18321 — Malicious code in dsh-plugin-blender-3d npm package

OpenSSF Package Analysis identified npm package dsh-plugin-blender-3d version 0.2.1 as malicious. The version adds a postinstall script that runs during npm install and downloads and executes cryptocurrency-mining-related code.