A malicious PyTorch Lightning update (v2.6.3) on PyPI spread briefly, stealing credentials and raising major concerns about AI supply chain security....

A malicious PyTorch Lightning update (v2.6.3) on PyPI spread briefly, stealing credentials and raising major concerns about AI supply chain security....

A malicious PyTorch Lightning update (v2.6.3) on PyPI spread briefly, stealing credentials and raising major concerns about AI supply chain security....

  Python’s software supply chain has been compromised, which targeted the popular PyPI package Lightning and exposed downstream machine learning...

  Python’s software supply chain has been compromised, which targeted the popular PyPI package Lightning and exposed downstream machine learning...

In yet another software supply chain attack, threat actors have managed to compromise the popular Python package Lightning to push two malicious...

In yet another software supply chain attack, threat actors have managed to compromise the popular Python package Lightning to push two malicious...

A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting...

A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting...

Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware...