Safeguard
Tag

ultralytics-pwn-request-attack

Safeguard articles tagged "ultralytics-pwn-request-attack" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

The Ultralytics AI pwn request supply chain attack

How a malicious pull request, a poisoned GitHub Actions cache, and a stored PyPI token turned the Ultralytics YOLO package into a cryptominer.

Jul 3, 20267 min read
ultralytics-pwn-request-attack — Safeguard Blog