A single line of Python code was all it took. Developers who ran import lightning after installing versions 2.6.2 or 2.6.3 of ...

On April 30, 2026, malicious code was discovered in PyTorch Lightning versions 2.6.2 and 2.6.3, stealing credentials during installation and potentially enabling further supply chain attacks. The same ...