Loading...
Loading...
Browse all stories on DeepNewz
VisitUltralytics releases security patch for compromised versions by January 31, 2025?
Yes • 50%
No • 50%
Official announcements from Ultralytics or updates on the PyPI repository
Ultralytics AI Library and 'aiocpa' Python Package Compromised for Cryptocurrency Mining
Dec 7, 2024, 09:51 AM
Two versions of the popular Python AI library, Ultralytics, specifically versions 8.3.41 and 8.3.42, have been compromised to deliver cryptocurrency miners to users. The compromised packages, which include the home of yolov8 and yolo11, were found on the Python Package Index (PyPI). This breach has potentially affected thousands of users, including those using ComfyUI through the custom node ComfyUI-Impact-Pack. The incident has raised concerns over software supply chain security in the AI and machine learning community. Additionally, another Python package, 'aiocpa', was exposed as a cryptocurrency infostealer.
View original story
Apple • 25%
Microsoft • 25%
Third-party cybersecurity firm • 25%
No patch released • 25%
Yes • 50%
No • 50%
Regulatory Changes • 25%
Sanctions • 25%
Public-Private Partnerships • 25%
Other • 25%
macOS • 33%
Linux • 33%
Both simultaneously • 33%
Yes • 50%
No • 50%
Yes • 50%
No • 50%
Yes • 50%
No • 50%
No major response • 25%
Increased security audits • 25%
Adoption of alternative libraries • 25%
Formation of a security consortium • 25%
AI/ML library • 25%
Web development library • 25%
Data analysis library • 25%
Other category of library • 25%