On April 30, two releases of one of the most popular machine learning libraries on the Python Package Index were caught carrying credential-stealing malware. Versions 2.6.2 and 2.6.3 of the lightning ...
On April 30, 2026, someone slipped credential-stealing malware into two freshly published versions of PyTorch Lightning, one of the most widely used frameworks in machine learning. Versions 2.6.2 and ...