Stay updated with breaking news from Python Package Index. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Developers using the open-source package PyTorch machine learning framework may have downloaded a compromised version of the package from the PyPI repository over the holidays. The PyTorch team warns those who downloaded and installed PyTorch-nightly on Linux via pip between December 25, 2022 and December 30, 2022, should uninstall it and torchtriton immediately. They should
A rogue packet on the machine learning framework allowed the attacker to exfiltrate data, including SSH keys.
PyTorch open source framework installs malicious code after a dependency’s PyPI code repository was compromised.
Python developers who spent some time coding over the holiday break may want to check out an advisory regarding a malicious PyTorch package that was being fetched from PyPI last week.
An open source machine learning framework that accelerates the path from research prototyping to production deployment.