PyTorch compromised to demonstrate dependency confusion attack on Python environments
Threat actors compromised the PyTorch Machine Learning Framework by adding a malicious dependency. The maintainers of the PyTorch package warn of a supply chain attack. Users who have installed PyTorch-nightly on Linux via pip between December 25, 2022 and December 30, 2022, to uninstall it and use the latest binaries. “If you installed PyTorch-nightly on […]
The post PyTorch compromised to demonstrate dependency confusion attack on Python environments appeared first on Security Affairs.