Malicious Code Found in PyTorch Lightning

A security flaw has been identified in the PyTorch Lightning library, a widely used AI training framework. According to Hacker News reports, a malicious dependency was detected in the library, which could allow attack…

The compromised package, described as a "Shai-Hulud-themed" malware, was uploaded to the Python Package Index (PyPI) under a forked version of the library. Semgrep, the security firm that uncovered the issue, confirme…

The discovery arrives amid heightened scrutiny of AI governance. U.S. Attorney General Merrick Garland recently announced the DOJ has dissolved its Voting Rights Unit, a move critics argue weakens oversight of algorit…