3 ms·

One thing that makes me wonder is that there are 4 security issues raised and all of them were automatically commented and closed by some bot called `pl-ghost`

One thing that makes me wonder is that there are 4 security issues raised and all of them were automatically commented and closed by some bot called `pl-ghost` [1][2][3][4]. In the end, only this one [4] properly handled, and all bot comments are deleted. You can see the bot comments in another report [5], which is more informative than the OP one. [1] https://github.com/Lightning-AI/pytorch-lightning/issues/21689 https://github.com/Lightning-AI/pytorch-lightning/issues/216... [2] https://github.com/Lightning-AI/pytorch-lightning/issues/21690 https://github.com/Lightning-AI/pytorch-lightning/issues/216... [3] https://github.com/Lightning-AI/pytorch-lightning/issues/21692 https://github.com/Lightning-AI/pytorch-lightning/issues/216... [4] https://github.com/Lightning-AI/pytorch-lightning/issues/21691 https://github.com/Lightning-AI/pytorch-lightning/issues/216... [5] https://socket.dev/blog/lightning-pypi-package-compromised https://socket.dev/blog/lightning-pypi-package-compromised

andymcsherry 5mo ago
Andy from Lightning here. Yeah, the PyPi credentials were stolen through the compromised pl-ghost bot account. The attacker used this account to create a new actions workflow, which was ran and parsed out secrets for PyPi. After releasing the package, the attacker then used that account to troll us a bit with those comments.