1
Published signals
currently linked to this company
Company intelligence
Lightning cybersecurity incidents and threat signals
lightning.ai
This company page brings together public reporting currently associated with Lightning. It reflects signals published by Shadow Tier and should not be read as a complete incident history.
Company links
0
Last 28 days
recent published signals
0
Last 90 days
recent published signals
0
High or critical
confidence classifications
June 26, 2026
Latest report
most recent published signal
Company signals
All published signals involving Lightning
PyTorch Lightning Python Package Compromised in Supply Chain Attack
In a software supply chain attack, threat actors compromised the popular Python package Lightning to push two malicious versions (2.6.2 and 2.6.3) on April 30, 2026. These malicious versions were designed to conduct credential theft and are assessed to be an extension of the Mini Shai-Hulud supply chain incident. The PyPI repository has since quarantined the project.
FAQ
Questions about Lightning cybersecurity reporting
What does the Lightning page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Lightning.
Does every mention of Lightning appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.