VulnWatch VulnWatch
← Back to dashboard
Unknown rss_bleepingcomputer · rss_09d8ee7e9a12f54cb9afbd18310d9e52

Backdoored PyTorch Lightning package drops credential stealer

Published May 4, 2026

A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and cloud services. [...]

Affected AI Products

pytorch
Get the weekly digest. Every Monday: top AI security stories of the week. Free.