On April 30, two releases of one of the most popular machine learning libraries on the Python Package Index were caught carrying credential-stealing malware. Versions 2.6.2 and 2.6.3 of the lightning ...