The Hacker News
"PyTorch Lightning and Intercom-Client hit in supply chain attacks to steal credentials." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 01 May 2026, 0250 UTC. URL-- https://thehackernews.com/ Please check URL or scroll down to read your selections. Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials Apr 30, 2026 Supply Chain Attack / Malware In yet another software supply chain attack, threat actors have managed to compromise the popular Python package Lightning to push two malicious versions to conduct credential theft. According to Aikido Security , OX Security , Socket , and StepSecurity , the two malicious versions are versions 2.6.2 and 2.6.3, both of which were published on April 30, 2026. The campaign is assessed to be an extension of the Mini Shai-Hulud supply chain inc...