Cryptominer
Security incidents tagged Cryptominer. Newest first.
0 Cryptominer incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 680
- Longest quiet run: 680 days (Dec 12–Oct 22)
Show 1 older incident1 older incident
December 2024 1
PatchedUltralytics PyPI releases backdoored with a crypto miner
ultralytics (PyPI)
Attackers compromised the Ultralytics YOLO project's GitHub Actions workflows (by poisoning the Actions cache) and published ultralytics 8.3.41 and 8.3.42 to PyPI with an XMRig cryptominer. They later pushed 8.3.45 and 8.3.46 using a leftover PyPI API token. All four versions were removed. PyPI's analysis credits Trusted Publishing attestations with making the attack auditable.
