npm
Maliciousdsh-plugin-blender-3d@0.2.1
Vulnerability report · Last retrieved from osv.dev October 26, 2026 at 5:44 AM UTC
OSV ID
MAL-2026-18321
Ecosystem
npm
Summary
The OpenSSF Package Analysis project identified 'dsh-plugin-blender-3d' @ 0.2.1 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.
Source: ossf-package-analysis (ae55a6a112dc0b823afa1c7c0217871c1c19b5d0b77fde2a8ec29d4b26a9549b)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.