Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library
Malware was discovered embedded in the PyTorch Lightning open-source training library, flagged with Dune-themed IOCs, posing supply-chain risk to developers using the library.
Excerpt
HN · 253 points · 80 comments
Read at source: https://semgrep.dev/blog/2026/malicious-dependency-in-pytorch-lightning-used-for-ai-training/
Discussions
- hn · 253 points · 80 comments
- hn · 270 points · 83 comments
- hn · 282 points · 91 comments
- hn · 295 points · 95 comments
- hn · 302 points · 99 comments
- hn · 309 points · 99 comments
- hn · 315 points · 103 comments
- hn · 319 points · 105 comments
- hn · 327 points · 111 comments
- hn · 331 points · 112 comments
- hn · 334 points · 112 comments
- hn · 340 points · 116 comments
- hn · 345 points · 117 comments
- hn · 350 points · 122 comments
- hn · 356 points · 123 comments
- hn · 366 points · 125 comments
- hn · 374 points · 127 comments
- hn · 381 points · 128 comments
- hn · 387 points · 131 comments
- hn · 389 points · 133 comments
- hn · 392 points · 133 comments
- hn · 396 points · 133 comments
- hn · 396 points · 137 comments
- hn · 397 points · 141 comments
- hn · 400 points · 145 comments
- hn · 405 points · 147 comments
- hn · 407 points · 147 comments
- hn · 410 points · 151 comments
- hn · 417 points · 154 comments
- hn · 423 points · 155 comments
- hn · 429 points · 158 comments
- hn · 432 points · 160 comments
- hn · 434 points · 161 comments
- hn · 441 points · 161 comments
- hn · 446 points · 166 comments
- hn · 447 points · 168 comments
- hn · 448 points · 171 comments