On April 30, 2026, someone slipped credential-stealing malware into two freshly published versions of PyTorch Lightning, one ...
Two recent PyTorch Lightning releases on PyPI were found to contain credential-stealing malware capable of self-propagation. The malicious code targeted developer tokens, API keys, and cloud ...