PyTorch Machine Learning Framework Compromised with Malicious Dependency

By Ravie Lakshmanan — January 2^nd 2023 at 14:27

The maintainers of the PyTorch package have warned users who have installed the nightly builds of the library between December 25, 2022, and December 30, 2022, to uninstall and download the latest versions following a dependency confusion attack. "PyTorch-nightly Linux packages installed via pip during that time installed a dependency, torchtriton, which was compromised on the Python Package

FreshRSS

PyTorch Machine Learning Framework Compromised with Malicious Dependency