Product
lightning
- First Reported
- Apr 30, 2026
- Latest Reported
- Apr 30, 2026
Reported Context (1)
- The popular PyPI package lightning has been compromised in a supply chain attack affecting newly published versions of the package. Compromised Lightning PyPI Releases Steal Credentials and Spread Through GitHub and npm
Malware (1)
Threat Actors (2)
MITRE ATT&CK (6)
Products (4)
Tools (2)
Industries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.