Blender MCP maintainer's GitHub account hijacked, with access restored two days later

Siddharth Ahuja, the maintainer of blender-mcp, a community MCP server for controlling Blender that he states has 25,000 GitHub stars, posted on 2026-08-09 that his GitHub account had been hacked and all of his ownership rights stripped. His disclosure named Blender MCP and Ableton MCP (2.6k stars) among the repositories taken away, along with personal projects.

On 2026-08-11 he posted an update: GitHub banned the hacker and restored access to his repositories and account. In the same update he stated that while the GitHub repository was taken over, "the actual MCP servers were NOT compromised", because the attacker "did not have the credentials to update the server python" package.

GitHub API records line up with that timeline. An organization named MCPBlender, describing itself as "AI-powered integrations for Blender, Ableton & creative tools via Model Context Protocol", was created on 2026-08-08, the day before the disclosure. As of 2026-08-13, a request for MCPBlender/blender-mcp resolves back to ahujasid/blender-mcp, the transfer-redirect behavior GitHub applies to a moved repository, and both blender-mcp and ableton-mcp show pushes dated 2026-08-11. No security advisory has been published on the repository, and the maintainer's account of what the attacker could and could not reach is the only public statement on impact so far.

This story is sourced from the maintainer's own verified X account and mechanical GitHub API records; the verification method is recorded as manual because there is no vendor advisory or incident page to cite.