Python Library Hijacked: Cryptocurrency Miners Invade Ultralytics!
Two versions of the popular Python AI library, Ultralytics, were hijacked to run a cryptocurrency miner. Users noticed a CPU surge, a clear red flag, leading to the discovery. A security fix has now been rolled out, but remember, nothing says “I love you” like a surprise crypto mining operation!
Hot Take:
Who knew AI could make your computer sweat harder than a marathon runner? It seems like the only thing ultralytics mined faster than insights was cryptocurrency! Time to put those CPUs on a vacation.
Key Points:
- Two versions of the ultralytics Python AI library were compromised with a cryptocurrency miner.
- The affected versions, 8.3.41 and 8.3.42, have been removed from the PyPI repository.
- A security fix has been introduced to prevent future malicious code injections.
- Attackers exploited a GitHub Actions Script Injection to mess with the build environment.
- The payload was primarily aimed at mining cryptocurrency using XMRig.
Already a member? Log in here