A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and cloud services. [...]
Backdoored PyTorch Lightning package drops credential stealer
Résumé + lien vers la source. Sans paywall, sans tracking.