On April 30, 2026, malicious code was discovered in PyTorch Lightning versions 2.6.2 and 2.6.3, stealing credentials during installation and potentially enabling further supply chain attacks. The same ...