Cryptominer Deployment Vulnerability in tensorflow-opt Package
Summary
MAL-2026-983: Malicious code in tensorflow-opt (PyPI). Affects tensorflow-opt versions 0.10 – 0.9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tensorflow-opt package is a Python library available on PyPI, designed to extend the functionality of TensorFlow, a popular machine learning framework. It is often used by developers to enhance their machine learning models with additional optimization features. However, this package has been compromised, leading to a significant security vulnerability where malicious code is introduced, posing risks to users' systems.
Vulnerability Detail
The vulnerability originates from a malicious code injection in the tensorflow-opt package, identified as a dependency confusion attack. This attack masquerades as a legitimate TensorFlow extension but instead contains cryptomining software. When users invoke the 'start' method, the malicious code is executed, copying the cryptominer to the main TensorFlow installation directory and initiating mining operations directed at a hardcoded wallet. This not only consumes system resources but also compromises the integrity of the user's environment.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall tensorflow-optIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can monitor their system for unusual CPU usage or network activity that may indicate cryptomining operations. Additionally, consider using virtual environments to isolate dependencies and minimize the impact of potential malicious packages.
Conclusion
The tensorflow-opt package has been compromised, leading to a serious vulnerability that allows for cryptomining operations on affected systems. Users are urged to uninstall the package and monitor their systems for any signs of malicious activity. Utilizing tools like Vulert can help in identifying and managing such vulnerabilities effectively.
See every vulnerability recorded for tensorflow-opt →
FAQ
The vulnerability involves the deployment of cryptomining software through a malicious version of the tensorflow-opt package, which can compromise system resources.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If you have installed the tensorflow-opt package, you should uninstall it immediately using 'pip uninstall tensorflow-opt' and monitor your system for any unusual activity.
Versions of tensorflow-opt prior to the malicious release are considered safe. Always verify the package source and check for updates from trusted repositories.
Vulert uses the Pipfile.lock to monitor and alert in real-time for open-source vulnerabilities, providing users with insights into potential risks in their applications.
