PyTorch Lightning project quarantined by PyPI (pypi.org)

• PyPI quarantine triggered by suspicious package changes
• Potential compromise of high-value AI tooling supply chain
• Systemic vulnerability in Python dependency management

"PyPI has placed the PyTorch Lightning package into quarantine following reports of suspicious activity. The incident highlights critical vulnerabilities in the software supply chain for high-demand AI frameworks. Investigations are focused on whether maintainer accounts were compromised or if the package metadata was tampered with, posing a significant risk to developers relying on the library for large-scale model training."