{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "lightning"
      },
      "versions": [
        "2.6.2",
        "2.6.3"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "https://github.com/kam193",
        "https://bad-packages.kam193.eu/"
      ],
      "name": "Kamil Ma\u0144kowski (kam193)",
      "type": "ANALYST"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "pypi/2026-04-compr-lightning/lightning",
        "import_time": "2026-04-30T17:01:25.03549765Z",
        "modified_time": "2026-04-30T16:53:41Z",
        "sha256": "703ac419d775488be137d7e01517d768da0b5581ab63338fb9523f2289f2b92c",
        "source": "kam193",
        "versions": [
          "2.6.2",
          "2.6.3"
        ]
      },
      {
        "id": "pypi/2026-04-compr-lightning/lightning",
        "import_time": "2026-04-30T18:35:47.62757048Z",
        "modified_time": "2026-04-30T16:53:41Z",
        "sha256": "21d1958db35f91cdd9e4daf8466ded080429f05ef2f989a858bef41af4d220b1",
        "source": "kam193",
        "versions": [
          "2.6.2",
          "2.6.3"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (703ac419d775488be137d7e01517d768da0b5581ab63338fb9523f2289f2b92c)\nVersions 2.6.2, 2.6.3 were compromised.\n\n\nCompromised versions contain injected code that starts automatically during importing the module, downloads (legitimate) JavaScript runtime, and executes included JavaScript infostealer. It collects credentials from multiple sources (e.g. files, process memory, cloud metadata endpoints, CLI commands like gh or gcloud), sensitive cryptocurrency data, shell history files. It also attempts to spread itself using discovered credentials to other repositories and packages.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-04-compr-lightning\n\n\nReasons (based on the campaign):\n\n\n - infostealer\n\n\n - files-exfiltration\n\n\n - exfiltration-ssh-keys\n\n\n - exfiltration-crypto\n\n\n - exfiltration-credentials\n\n\n - compromised-package\n",
  "id": "MAL-2026-3201",
  "modified": "2026-04-30T18:38:32Z",
  "published": "2026-04-30T16:53:41Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/Lightning-AI/pytorch-lightning/issues/21691"
    },
    {
      "type": "WEB",
      "url": "https://www.aikido.dev/blog/pytorch-lightning-pypi-compromise-mini-shai-hulud"
    },
    {
      "type": "WEB",
      "url": "https://socket.dev/blog/lightning-pypi-package-compromised"
    },
    {
      "type": "WEB",
      "url": "https://bad-packages.kam193.eu/pypi/campaign/2026-04-compr-lightning"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Lightning-AI/pytorch-lightning/security/advisories/GHSA-w37p-236h-pfx3"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in lightning (PyPI)"
}