in computer news: lol, lmao github.com/ultralytics/... it looks like github actions got tricked into running bash through a malicious branch name which was used to ship mining malware inside python packages incredible
Discrepancy between what's in GitHub and what's been published to PyPI for v8.3.41 · Issue #18027 · ultralytics/ultralytics
Bug Code in the published wheel 8.3.41 is not what's in GitHub and appears to invoke mining. Users of ultralytics who install 8.3.41 will unknowingly execute an xmrig miner. Examining the file util...
github.com
