Another day - another #SoftwareSupplyChain attack. This time #Ultralytics - an AI vision library downloaded 260,000+ times a day from #PyPI was compromised by a malicious code injection which installed cryptocurrency miner. Avoid versions 8.3.41 & 8.3.42:
https://www.bleepingcomputer.com/news/security/ultralytics-ai-model-hijacked-to-infect-thousands-with-cryptominer/
Sam Stepanyan :verified: 🐘 /
npub18d…rltg5
2024-12-09 19:41:49
Author Public Key
npub18d0arwv295u03fd825dvn5eharfx25rtrkemffxnar9dzn82drtssrltg5Published at
2024-12-09 19:41:49Event JSON
{
"id": "5d6a79d38ca476097590fe08fce742d09772a52b4903548820b07c31c73e6139",
"pubkey": "3b5fd1b98a2d38f8a5a7551ac9d337e8d265506b1db3b4a4d3e8cad14cea68d7",
"created_at": 1733773309,
"kind": 1,
"tags": [
[
"t",
"softwaresupplychain"
],
[
"t",
"ultralytics"
],
[
"t",
"pypi"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/113624567587628167",
"activitypub"
]
],
"content": "Another day - another #SoftwareSupplyChain attack. This time #Ultralytics - an AI vision library downloaded 260,000+ times a day from #PyPI was compromised by a malicious code injection which installed cryptocurrency miner. Avoid versions 8.3.41 \u0026 8.3.42:\n\nhttps://www.bleepingcomputer.com/news/security/ultralytics-ai-model-hijacked-to-infect-thousands-with-cryptominer/",
"sig": "43c56b923e73d88153bf2bb86a5cbf629fe4c42613fa4ffb46c48504084b55d3bb0dd91e7f146634962b5a49e488a7c83b46f0ee20b00b4f8895fd4f338dbf82"
}