ULTRALYTICS AI LIBRARY COMPROMISED: CRYPTOCURRENCY MINER FOUND IN PYPI VERSIONS

Summary from the TLDR InfoSec newsletter

Two versions of the Ultralytics AI library were compromised to deliver a cryptocurrency miner, leading to a spike in CPU usage for users. The malicious code injection occurred in the PyPI deployment workflow, allowing unauthorized modifications to be inserted after the code review step. Users are advised to update to the latest version of the library to avoid potential security risks.