Advisory

Lightning 2.6.x Malware: Check Your Local AI Stack

PyPI's lightning package was poisoned April 30 with malware that abuses Claude Code hooks. Here's the 5-minute audit I ran on my own 3090 box.