Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library(semgrep.dev)
450 points by j12y | 172 comments
Semgrep security research post reporting that PyPI package lightning versions 2.6.2 and 2.6.3 were compromised with Shai-Hulud themed credential-stealing malware.