Note: This blog was initially published at 8:40pm ET on April 30. It was updated at 6:54pm ET on May 1 to include additional packages.
Malicious PyTorch Lightning Packages Found on PyPI
calendar_today
April 30, 2026
person
research@sonatype.com (Sonatype Security Research Team)
domain
sonatype