On April 30, 2026, someone slipped credential-stealing malware into two freshly published versions of PyTorch Lightning, one of the most widely used frameworks in machine learning. Versions 2.6.2 and ...
PyTorch has identified a malicious dependency with the same name as the framework's 'torchtriton' library. This has led to a successful compromise via the dependency confusion attack vector. PyTorch ...