{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T23:39:04.690Z",
  "tag": {
    "id": "cryptominer",
    "label": "Cryptominer",
    "isStack": false,
    "url": "https://pwn.watch/t/cryptominer",
    "feed": "https://pwn.watch/t/cryptominer/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 1
  },
  "incidents": [
    {
      "slug": "ultralytics-pypi-supply-chain-attack",
      "title": "Ultralytics PyPI releases backdoored with a crypto miner",
      "url": "https://pwn.watch/i/ultralytics-pypi-supply-chain-attack",
      "json": "https://pwn.watch/i/ultralytics-pypi-supply-chain-attack.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "ultralytics (PyPI)",
      "tags": [
        "python",
        "pypi",
        "github-actions",
        "ai",
        "ultralytics",
        "supply-chain",
        "cryptominer",
        "github"
      ],
      "cveIds": [],
      "affectedVersions": [
        "8.3.41",
        "8.3.42",
        "8.3.45",
        "8.3.46"
      ],
      "fixedVersions": [
        "Malicious versions removed from PyPI; see vendor advisory for the clean release"
      ],
      "startedAt": "2024-12-04",
      "closedAt": "2024-12-11",
      "updatedAt": "2024-12-11",
      "summary": "Attackers compromised the Ultralytics YOLO project's GitHub Actions workflows (by poisoning the Actions cache) and published ultralytics 8.3.41 and 8.3.42 to PyPI with an XMRig cryptominer. They later pushed 8.3.45 and 8.3.46 using a leftover PyPI API token. All four versions were removed. PyPI's analysis credits Trusted Publishing attestations with making the attack auditable.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "ultralytics-pypi-supply-chain-attack",
      "incidentTitle": "Ultralytics PyPI releases backdoored with a crypto miner",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-12-11",
      "title": "PyPI publishes its analysis: 8.3.41, 8.3.42, 8.3.45 and 8.3.46 affected and removed",
      "body": null,
      "sourceUrl": "https://blog.pypi.org/posts/2024-12-11-ultralytics-attack-analysis/",
      "url": "https://pwn.watch/i/ultralytics-pypi-supply-chain-attack"
    },
    {
      "incident": "ultralytics-pypi-supply-chain-attack",
      "incidentTitle": "Ultralytics PyPI releases backdoored with a crypto miner",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-12-05",
      "title": "Issue #18027: published 8.3.41 wheel differs from GitHub and runs an XMRig miner",
      "body": null,
      "sourceUrl": "https://github.com/ultralytics/ultralytics/issues/18027",
      "url": "https://pwn.watch/i/ultralytics-pypi-supply-chain-attack"
    }
  ]
}