Cos(余弦)😶🌫️
@evilcos
Founder of @SlowMist_Team // 分身一号/捉虫大师/救火运动员 // 🕖灾备频道
加入 November 2008
1.5K 正在关注 123.6K 粉丝
简单了解了下，lightning（即 PyTorch Lightning / Lightning AI 框架）在深度学习和 PyTorch 生态里非常流行…
所以，最近的投毒喜欢干玩 AI 工程的技术人员？🤦🏻♂️顺便干掉依赖这些的各大服务。
显示更多
🚨 The popular PyPI package lightning has been compromised in a supply chain attack.
Socket detected malicious code in versions 2.6.2 and 2.6.3 that executes automatically on import, downloads Bun, and runs an 11 MB obfuscated JavaScript payload designed to steal credentials.
This appears to be connected to yesterday's mini Shai-Hulud attack, but we're still investigating. #Python#
显示更多
