> Backdoored PyTorch Lightning package drops credential stealer
[AUTHOR: Bill Toulas]
[DATE: 04/05/2026 17:15]
[LANGUAGE: EN]
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and cloud services. [...]