Popular Python Package lightning Hacked in Supply Chain Attack

Cybersecuritynews •Guru Baran • April 30, 2026

The widely used PyTorch Lightning framework, which automatically executes credential-stealing malware on import, has also compromised GitHub maintainer accounts. The popular PyPI package lightning — the deep learning framework used to train, deploy, and ship AI products has been compromised in an active supply chain attack. Socket’s Research Team flagged versions 2.6.2 and 2.6.3 as […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Supply Chain Attack Compromises PyTorch Lightning Package The PyTorch Lightning framework, a widely used Python package, has been compromised in a supply chain attack that executes credential-stealing malware upon import. Versions 2.6.2 and 2.6.3 of the package have been flagged as malicious, affecting users who import these versions. The attack has also led to the compromise of GitHub maintainer accounts, raising concerns about the broader implications for developers and organizations relying on this framework. The scope of the impact is significant given the popularity of PyTorch Lightning in AI product development. Users are advised to avoid these specific versions until a fix is released. The current status indicates ongoing investigations into the attack vector and potential remediation strategies. 7 sources 66

Popular Python Package lightning Hacked in Supply Chain Attack

The full story

Extracted Entities

Attack Types (2)

Platforms (3)