ITADN

2.6.2 and 2.6.3 was compromised, probably shai, pl-ghost may also be compromised?

#21691Openpvdz 创建于 2026-04-30
bugneeds triagever: 2.6.x
P
pvdzcommented
2.6.2 and 2.6.3 are compromised. I opened an issue reporting a compromise earlier. It was closed by pl-ghost in a meme way. That's no way to respond and we're suspecting that account is fully compromised too. We highly suspect that account was compromised by the worm, maybe driven through ai. That is unknown. https://socket.dev/blog/lightning-pypi-package-compromised
10 条评论