PyTorch Lightning project quarantined by PyPI(pypi.org)

5 pointsby grepLeigh7 hours ago3 comments

m4r71n7 hours ago
Malicious versions are 2.6.2 and 2.6.3: https://socket.dev/blog/lightning-pypi-package-compromised
- grepLeigh7 hours ago
  https://github.com/Lightning-AI/pytorch-lightning/issues/216...
grepLeigh7 hours ago
Supply chain attack? Does anyone have more info?
rvz6 hours ago
That's really bad.