bretton.dev

I was also impacted, you need to remove the payload that got dumped:

Payload: /tmp/.pxb/{curl,wget}, /tmp/.spid

Two processes named khungtaskd / cron

They also stole your admin token so go to the Plex UI and log out of all devices for whichever account has ownership of the instance.

Then you can reclaim ownership and it resets the admin token.

You should likely be fine, I didn't have any crypto miners on mine, it was just in a docker instance and didn't have access outside of it. I would be much more worried if it was a direct install on a main PC.

Also install watch tower

It's interesting I have the exact opposite perspective with AI in regards to selfhosting.

The customizability is now endless for me, I can do anything, customize anything, problems that are typically 1-2 hours are fixed in <5 minutes.

Don't want to fiddle w/ a GUI? Shoot off a message and it's done.

OP if you don't mind running this through a Hermes / OpenClaw harness this is probably the easiest way with pre built email connectors. Also if you don't mind spending a few bucks a month DeepSeek v4 will blow out anything you run locally for pennies (or gpt luna as of last wed.)

It can also set up its own custom connector if needed and run as needed via CRON.

Anyone have any recommendations?

Can't get over how much I love Babs Olusanmokun as M'Benga