Popular Python Package lightning Hacked in Supply Chain Attack
The widely used PyTorch Lightning framework, which automatically executes credential-stealing malware on import, has also compromised GitHub maintainer accounts. The popular PyPI package lightning — the deep learning framework used to train, deploy, and ship AI products has been compromised in an active supply chain attack. Socket’s Research Team flagged versions 2.6.2 and 2.6.3 as […] The post Popular Python Package lightning Hacked in Supply Chain Attack appeared first on Cyber Security News.
The PyPI package lightning has been compromised in a supply chain attack, compromising GitHub maintainer accounts and automatically executing credential-stealing malware on import. This attack highlights the vulnerability of widely used open-source packages to supply chain attacks.
Read the full article
This is a curated summary. The complete article is available at Cyber Security News.