PyTorch Dependency Chain Compromised During Winter Holidays

Users who installed PyTorch-Nightly during last week of December are warned to uninstall it and torchtriton immediately. The good news is those who use PyTorch stable package were not impacted by this problem. The open-source Python-based machine learning framework discovered the malicious dependency on December 30th. A valid dependency named torchtriton’s malware-infected copy was uploaded […]

The post PyTorch Dependency Chain Compromised During Winter Holidays appeared first on Heimdal Security Blog.

compromised copy cybersecurity news december dependency framework holidays machine machine learning malicious malware nightly package problem python pytorch the good valid winter