The blender-headless package on PyPI contains malicious code that leaks the installer's hostname and import events via DNS queries to an external domain. This occurs during both package installation and module import, bypassing typical HTTP egress controls. The package's module name and package name are unrelated, and its only behavior is this DNS beaconing.