PyTorch Lightning Poisoned — Mini Shai-Hulud Worm Crosses Into the AI/ML Supply Chain
The lightning package on PyPI — the high-level PyTorch framework powering ML training pipelines across the globe — was compromised in an active supply chain attack on April 30, 2026.…
