2024-12-04 · 2024-Q4
Ultralytics PyPI Supply Chain Attack
Outside the model: Adjacent ecosystemAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Not applicable
Target
Ultralytics YOLO AI library
Impact
Four malicious versions uploaded containing XMRig crypto miner; two-phase attack over Dec 4-7
Root cause
Attacker abused git branch names to steal GitHub Actions CI/CD credentials; compromised PyPI token
Sources
Catalog
Cite this: AgentProv incident record: Ultralytics PyPI Supply Chain Attack (2024-12-04). https://agentprov.com/incidents/2024-12-04-ultralytics-pypi-supply-chain-attack