Top New Best Ask Show Jobs

PyTorch Lightning project quarantined by PyPI | Hacker News Reader

PyTorch Lightning project quarantined by PyPI

pypi.org

6 points·grepLeigh··4 comments

Open articleView on HN

Malicious versions are 2.6.2 and 2.6.3: https://socket.dev/blog/lightning-pypi-package-compromised

https://github.com/Lightning-AI/pytorch-lightning/issues/216...

That's really bad.

Supply chain attack? Does anyone have more info?

Reply on news.ycombinator.com