Fake 'Blender MCP' Addon Dropped StealC Infostealer the Moment You Enabled It
A single-commit GitHub repo cloned the popular blender-mcp project, wrapped it in a polished 'MCP Pro' README, and — per a teardown — dropped StealC on enable.
We use cookies to measure how the site is used and how our ads perform (Google Analytics and Ads, Microsoft Clarity, and the Meta, OpenAI and X ad pixels). “Essentials only” turns off advertising cookies everywhere, and analytics too in the EEA, UK and Switzerland. Privacy Policy
AUTOMATER NEWSROOM
New tools, useful workflows, and consequential AI developments.
Subscribe via RSS ↗A single-commit GitHub repo cloned the popular blender-mcp project, wrapped it in a polished 'MCP Pro' README, and — per a teardown — dropped StealC on enable.
Our AI-assisted editorial method · Explore our in-depth Intel guides