Skip to content
Threat Feed

Vendor

Lightning AI

1 brief RSS
critical advisory

Compromise of PyTorch Lightning PyPI Package Versions

Compromised PyTorch Lightning PyPI packages versions 2.6.2 and 2.6.3 contain malicious code related to credential harvesting, requiring immediate credential rotation and system rebuilding.

pytorch-lightning +1 supply-chain credential-theft pypi
2r 1t 1i