On April 30, 2026, someone slipped credential-stealing malware into two freshly published versions of PyTorch Lightning, one of the most widely used frameworks in machine learning. Versions 2.6.2 and ...
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and cloud services. The ...