PyTorch Lightning project quarantined by PyPI (pypi.org)

6 points by grepLeigh 4mo ago ↗ HN

3 comments of 4

[ 2.8 ms ] story [ 18.5 ms ] thread

grepLeigh 4mo ago ↗

Supply chain attack? Does anyone have more info?

m4r71n 4mo ago ↗

Malicious versions are 2.6.2 and 2.6.3: https://socket.dev/blog/lightning-pypi-package-compromised

rvz 4mo ago ↗

That's really bad.