[BUG] Xmrig miner in update of Calibre app container

[wonka929]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

As for the title.
It's not the first time, so keep an eye on it.

Expected Behavior

No response

Steps To Reproduce

install new calibre version

Environment

- OS:
- How docker service was installed:

CPU architecture

x86-64

Docker creation

name: linuxserver-calibre
services:
  app:
    cpu_shares: 90
    command: []
    deploy:
      resources:
        limits:
          memory: 16612179968
        reservations:
          devices: []
    environment:
      - CLI_ARGS=
      - PASSWORD=Willywonka92
      - PGID=1000
      - PUID=1000
      - TZ=Europe/Rome
    image: linuxserver/calibre:latest
    labels:
      icon: https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/calibre-logo.png
    ports:
      - target: 8080
        published: "8090"
        protocol: tcp
      - target: 8181
        published: "8181"
        protocol: tcp
      - target: 8081
        published: "8081"
        protocol: tcp
    restart: unless-stopped
    volumes:
      - type: bind
        source: /media/sda1/AppData/calibre
        target: /config
    devices: []
    cap_add: []
    networks:
      - default
    privileged: false
    container_name: ""
networks:
  default:
    name: linuxserver-calibre_default
x-casaos:
  architectures:
    - amd64
    - arm64
  author: WisdomSky
  category: LinuxServer.io
  description:
    en_us: Calibre is a powerful and easy to use e-book manager. Users say it's
      outstanding and a must-have. It'll allow you to do nearly everything and
      it takes things a step beyond normal e-book software. It's also completely
      free and open source and great for both casual users and computer experts.
  developer: LinuxServer.io
  hostname: ""
  icon: https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/calibre-logo.png
  index: /
  is_uncontrolled: true
  main: app
  port_map: "8080"
  scheme: http
  store_app_id: linuxserver-calibre
  tagline:
    en_us: A powerful and easy to use e-book manager. Users say it's outstanding and
      a must-have. It'll allow you to do nearly everything and it takes things a
      step beyond normal e-book software. It's also completely free and open
      source and great for both casual users and computer experts.
  thumbnail: https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/calibre-logo.png
  title:
    custom: ""
    en_us: Calibre

Container logs

asdasd

[github-actions]

Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.

[aptalca]

You got pwned my friend. Don't expose it publicly without auth

https://github.com/linuxserver/docker-calibre#security

[wonka929]

@aptalca well, could be. Strange, it seems to be a pretty tipical hack appening in calibre.
BTW rebuilt it from beginning, now no miner found.
Added password to endpoint 8181.
But now i can't see the app, everything is black ok port 8181.

This is a different issue anyhow, so i'll close this.

[thelamer]

"well, could be. Strange, it seems to be a pretty tipical hack appening in calibre."

So let me get this straight your theory is that through our transparent code and build environment https://ci.linuxserver.io/, our over ten years of trust built with the open source community, and us doing this all for free as self hosting enthusiasts. That we are now some how secretly embedding crypto miners in our images to make 3rd world levels of income despite not even spending our again transparent donations to our organization https://opencollective.com/linuxserver/transactions ?

That is your theory?

[wonka929]

@thelamer na could have been that one of the required dependencies to run the software could have been compromised, and since dependencies update is automatic you may have pulled a compromised library.
This happens not daily but very frequently.

[wonka929]

@thelamer moreover, as i was saying, it's something that seems to happen to Calibre quite frequently.
https://www.google.com/search?q=xmrig+calibre&oq=xmrig+calibre&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIJCAEQABgTGIAEMgoIAhAAGBMYFhgeMgoIAxAAGBMYFhgeMgoIBBAAGBMYFhgeMgoIBRAAGBMYFhgeMgoIBhAAGBMYFhgeMgYIBxBFGDzSAQg0MzczajBqN6gCALACAA&sourceid=chrome&ie=UTF-8

[thelamer]

@thelamer moreover, as i was saying, it's something that seems to happen to Calibre quite frequently. https://www.google.com/search?q=xmrig+calibre&oq=xmrig+calibre&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIJCAEQABgTGIAEMgoIAhAAGBMYFhgeMgoIAxAAGBMYFhgeMgoIBBAAGBMYFhgeMgoIBRAAGBMYFhgeMgoIBhAAGBMYFhgeMgYIBxBFGDzSAQg0MzczajBqN6gCALACAA&sourceid=chrome&ie=UTF-8

Thanks for the link