PyTorch Lightning project quarantined by PyPI pypi.org 6 points by grepLeigh 6 months ago · 4 comments Reader PiP Save Collapse all Expand all 3 threads m4r71n 6 months ago Malicious versions are 2.6.2 and 2.6.3: https://socket.dev/blog/lightning-pypi-package-compromised grepLeighOP 6 months ago https://github.com/Lightning-AI/pytorch-lightning/issues/216... rvz 6 months ago That's really bad. grepLeighOP 6 months ago Supply chain attack? Does anyone have more info?