Blogs

Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

Semgrep

The PyPI package lightning was compromised in versions 2.6.2 and 2.6.3 with Mini Shai-Hulud themed malicious code to execute credential-stealing malware on import.

Visit Site

Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep The Most Important Work in AI Training Is Also the Most Overlooked - Deepgram Blog ⚡️Deepgram How to implement AI training for employeesZapier AI frameworks: Definition, types, and how to chooseZapier Interactive Training Videos (+ How to Create One with AI)Synthesia How Beyond Retro scaled its retail operations trainingSynthesia How to Create an Online Training CourseSynthesia How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket Happy Birthday, Shai-HuludSocket Training: Hard Work Pays off for Data/AI ProsThenewstack Siloscape: Windows Malware That Breaks KubernetesThenewstack Modal Clusters are generally availableModal How sync. uses Modal to lipsync 100 hours of video a dayModal