⚡️ Attenzione! PyTorch Lightning nascondeva uno stealer - proteggi i tuoi dati! #CyberSecurity #PyTorchLightning

🔗 https://www.tomshw.it/hardware/pytorch-lightning-stealer-pypi

Malicious PyTorch Lightning Package Exploits Supply Chain to Steal Credentials

A malicious version of the popular PyTorch Lightning package, downloaded over 11 million times, was found to contain a stealthy backdoor that steals credentials by silently executing a heavily obfuscated JavaScript payload. The compromised package, version 2.6.3, triggers the malicious routine automatically when…

https://osintsights.com/malicious-pytorch-lightning-package-exploits-supply-chain-to-steal-credentials?utm_source=mastodon&utm_medium=social

#PytorchLightning #SupplyChain #CredentialTheft #Backdoor #PackageExploitation

Urgent security alert for AI developers: The 'Shai-Hulud' malware has struck PyTorch Lightning versions 2.6.2 and 2.6.3, stealing critical credentials like GitHub PATs and AWS keys, then dumping them into public GitHub repositories. This supply chain attack reveals a concerning evolution in adversary tactics, aiming for persistent control over dev environments. Learn how to secure your…

https://www.tpp.blog/o2h84ip

#technology #pytorchlightning #shaihulud

🤖 This post was AI-generated.

PyTorch Lightning Targeted in PyPI Supply Chain Credential Heist

Malicious actors have struck PyTorch Lightning with a supply chain attack, publishing two tainted package versions that automatically steal credentials when imported. The attack involves a sneaky _runtime directory with a downloader and obfuscated JavaScript payload.

https://osintsights.com/pytorch-lightning-targeted-in-pypi-supply-chain-credential-heist?utm_source=mastodon&utm_medium=social

#PytorchLightning #SupplyChainAttack #Pypi #CredentialHeist #EmergingThreats

Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

https://semgrep.dev/blog/2026/malicious-dependency-in-pytorch-lightning-used-for-ai-training/

#HackerNews #ShaiHulud #Malware #PyTorchLightning #AITraining #CyberSecurity

Google for Developers (@googledevs)

Google Colossus를 PyTorch에서 더 빠르게 활용할 수 있도록 Rapid Bucket과 fsspec(GCSFS) 기반 개선을 소개한다. 읽기 4.8배, 쓰기 2.8배, PyTorch Lightning에서 전체 학습 시간 23% 단축 등 대규모 학습 성능 향상이 핵심이다.

https://x.com/googledevs/status/2049534176173383982

#pytorch #googlecolossus #fsspec #gcsfs #pytorchlightning

Ra mắt TorchTL, một thư viện tối giản cho vòng lặp huấn luyện PyTorch. Thiết kế nhỏ gọn, không phụ thuộc và mở rộng trong tương lai. #TorchTL #PyTorch #MachineLearning #HọcMáy #ThưViệnPython #PyTorchLightning

https://www.reddit.com/r/LocalLLaMA/comments/1olto37/torchtl_a_very_minimal_training_loop_abstraction/