Home/AI Incident Database/Cryptomining payload injected into a widely used computer vision library through GitHub Actions cache poisoning
Cryptomining payload injected into a widely used computer vision library through GitHub Actions cache poisoning
Attackers exploited a template injection weakness and cache poisoning in the project's GitHub Actions workflows to publish YOLO releases carrying a cryptominer, twice, showing that ML libraries are prime supply chain targets.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.