Reported by 1 outlet
PyTorch Lightning backdoored on PyPI — "ShaiWorm" credential stealer deployed via version 2.6.3
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.80 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
PyTorch Lightning backdoored on PyPI — "ShaiWorm" credential stealer deployed via version 2.6.3
bleepingcomputer.com · 162d ago · May 5th, 2026
A supply chain attack on the PyTorch Lightning package (11 million+ monthly downloads) has been disclosed after version 2.6.3 published to PyPI included a hidden execution chain that silently downloads the Bun JavaScript runtime and executes an 11.4 MB obfuscated payload ("router_runtime.js") on import. Microsoft Defender detects the payload as "ShaiWorm" — a credential stealer targeting .env files, API keys, GitHub tokens, browser data (Chrome, Firefox, Brave), and cloud service credentials (AWS, Azure, GCP). The malware naming and attack pattern closely mirror the Mini Shai-Hulud SAP npm supply chain attack from April 29, suggesting a possible shared operator or toolkit. Microsoft reports the attack affected "a small number of devices" and was "contained to a narrow set of environments." The package has been reverted to the safe version 2.6.1 on PyPI. Anyone who ran
import lightningwith version 2.6.3 must immediately rotate all secrets and credentials. The compromise vector for the build/release pipeline remains under investigation.