wiz.io/blog· Dec 9, 2024· by Wiz Threat Research

Ultralytics AI Library Hacked via GitHub for Cryptomining

Open Original Article ↗
A supply chain attack on Ultralytics exploited GitHub Actions to inject malicious PyPI packages. Discover how it unfolded and the steps to mitigate the risk.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.