If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: amazon-inspector (7edaff2bd9abfea10a907cf99f87b444eee0c7ff54e88face42fe7c000d64775)
The sdist setup.py and the gcp_log_poc/__init__.py module both construct a DNS label of the form `{install|import}-{random-id}.blender-headless-{platform.node()}` as a subdomain of finaltests99.dssldrf.net and resolve it via socket.getaddrinfo. This leaks the installer's hostname and install/import event to the authoritative server for that domain over DNS, a channel that bypasses typical HTTP egress controls. The setup.py path runs during `pip install` of the sdist; the __init__.py path runs on every `import gcp_log_poc` in any Python process. The package has no build logic and no functionality matching its name — the shipped module name (gcp_log_poc) and the package name (blender-headless) are unrelated, and the module's only behavior is the DNS beacon.
Source: kam193 (da370fd492985ac15dcdcda2445fce49069d7a2b4cf62514806e36d589570fb6)
Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.
---
Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
Campaign: GENERIC-standard-pypi-install-pentest
Reasons (based on the campaign):
- The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.
- The package overrides the install command in setup.py to execute malicious code during installation.