ClosedPatched

Ultralytics PyPI releases backdoored with a crypto miner

ultralytics (PyPI)

Attackers compromised the Ultralytics YOLO project's GitHub Actions workflows (by poisoning the Actions cache) and published ultralytics 8.3.41 and 8.3.42 to PyPI with an XMRig cryptominer. They later pushed 8.3.45 and 8.3.46 using a leftover PyPI API token. All four versions were removed. PyPI's analysis credits Trusted Publishing attestations with making the attack auditable.

Why this severity: Supply-chain compromise of a popular ML package

Started: Dec 4, 2024
Closed: Dec 11, 2024

Follow this incident

Updated Dec 11, 2024

Affected

8.3.41
8.3.42
8.3.45
8.3.46

Fixed in

Malicious versions removed from PyPI; see vendor advisory for the clean release

Timeline2

Dec 11, 2024
PyPI publishes its analysis: 8.3.41, 8.3.42, 8.3.45 and 8.3.46 affected and removed
Source
Dec 5, 2024
Issue #18027: published 8.3.41 wheel differs from GitHub and runs an XMRig miner
Source

News & write-ups2

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Get notified