A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and cloud services.
First seen on bleepingcomputer.com
Jump to article: www.bleepingcomputer.com/news/security/backdoored-pytorch-lightning-package-drops-credential-stealer/
