PyTorch Lightning 2.6.2/2.6.3 supply chain attack malware executes on import, steals cloud creds.

via

Python

PSA for anyone running AI/ML training pipelines: PyTorch Lightning versions 2.6.2 and 2.6.3 (published April 30, 2026) were compromised in a supply chain attack. If you installed either version, your environment should be treated as fully compromised. Technical details worth discussing: The attack is import-time: modified __init__.py spawns a background thread the moment you run "import lightning". Downloads Bun JS runtime, deploys an 11MB obfuscated payload (router_runtime.js), harvests SSH key