All umami instances have been infected with a persisting crypto miner.

Source for that claim? Because it sounds like you’ve misunderstood something.