blender-geometry-nodes
Audited by Socket on Oct 13, 2026
1 alert found:
AnomalyNo direct malware behaviors are evident inside the shown Blender Geometry Nodes construction logic (no exec/eval, subprocess, credential/file access, or network calls are present in the displayed node-building code). However, the fragment repeatedly transmits executable Blender Python source over HTTP to a caller-specified `url`, with an implied remote execution mechanism. This creates a significant supply-chain/trust-boundary risk: if the endpoint/tooling is not strictly authenticated/allowlisted and verified, the payload path can become an RCE vector. Treat this as a medium-to-high security risk design pattern driven by remote code delivery rather than confirmed malicious content in the node logic itself.