---
id: 7082
title: "Ultralytics AI Library Hacked via GitHub for Cryptomining"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/ultralytics-ai-library-hacked-via-github-for-cryptomining"
published_at: "2024-12-09T15:56:01Z"
tags: ["ai-security", "supply-chain", "github-actions", "pypi", "incident", "cryptomining", "ultralytics"]
phying_url: "https://phying.com/item/7082"
lang: en
---

# Ultralytics AI Library Hacked via GitHub for Cryptomining

## Summary

Wiz details how attackers injected the XMRig cryptominer into Ultralytics PyPI releases 8.3.41/8.3.42 by exploiting GitHub Actions branch-name handling, a rare external compromise reaching PyPI.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2024-12-09T15:56:01Z
- **Original:** https://www.wiz.io/blog/ultralytics-ai-library-hacked-via-github-for-cryptomining
- **Phying News:** https://phying.com/item/7082