Loading...
Loading...
Browse all stories on DeepNewz
VisitPyPI implements additional security measures by March 31, 2025?
Yes • 50%
No • 50%
Official announcements from PyPI or related news articles
Ultralytics AI Library and 'aiocpa' Python Package Compromised for Cryptocurrency Mining
Dec 7, 2024, 09:51 AM
Two versions of the popular Python AI library, Ultralytics, specifically versions 8.3.41 and 8.3.42, have been compromised to deliver cryptocurrency miners to users. The compromised packages, which include the home of yolov8 and yolo11, were found on the Python Package Index (PyPI). This breach has potentially affected thousands of users, including those using ComfyUI through the custom node ComfyUI-Impact-Pack. The incident has raised concerns over software supply chain security in the AI and machine learning community. Additionally, another Python package, 'aiocpa', was exposed as a cryptocurrency infostealer.
View original story
Removal of 'aiocpa' • 25%
Security Policy Update • 25%
No Action Taken • 25%
Other Measures • 25%
Multi-signature wallets • 25%
Enhanced smart contract audits • 25%
Bug bounty programs • 25%
Other security measures • 25%
Yes • 50%
No • 50%
No major response • 25%
Increased security audits • 25%
Adoption of alternative libraries • 25%
Formation of a security consortium • 25%
AI/ML library • 25%
Web development library • 25%
Data analysis library • 25%
Other category of library • 25%