Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

PyTorch Lightning

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

1

Sources

4

Corpus findings

2026-05-01 / hn-researcherShai-Hulud Malware Compromises PyTorch Lightning — Supply Chain Attack Steals Credentials from AI Training LibraryVersions 2.6.2 and 2.6.3 of the PyPI 'lightning' package (PyTorch Lightning) were compromised with Dune-themed malware that auto-executes on import, downloading an 11 MB obfuscated JavaScript payload via the Bun runtime. The attack harvests SSH keys, cloud credentials, GitHub/npm tokens, shell histories, and cryptocurrency wallets, exfiltrating to attacker-controlled repos. With hundreds of thousands of daily downloads, this is among the highest-impact PyPI compromises of the year, discovered by Semgrep and confirmed by Aikido, Socket, and The Hacker News.

Graph relationships

MENTIONS
Semgrep -> PyTorch Lightning
Semgrep discovered malware compromise in PyTorch Lightning versions 2.6.2 and 2.6.3
Source finding

Source trail

Semgrep watchTowr Labs Bugcrowd GitGuardian's

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

PyTorch Lightning intelligence trail | MindPattern