Jan 01 2023 PyTorch discloses malicious dependency chain compromise over holidays

Source

PyTorch has identified a malicious dependency with the same name as the framework's 'torchtriton' library. This has led to a successful compromise via the dependency confusion attack vector. [...]