PyTorch-nightly Compromised via Dependency Confusion on PyPI

# PyTorch-nightly Compromised via Dependency Confusion on PyPI

https://gcdradar.vercel.app/incidents/pytorch-nightly-compromised-via-dependency-confusion-on-pypi · AIR-2022-0031 · closed 2022-02-17

- Lane: Supply chain
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2022-02-03
- AI role: Attack on AI
- Products: PyTorch-nightly

## Summary

Attackers uploaded a malicious dependency package to PyPI mimicking PyTorch-nightly, causing pip to install compromised code. The supply chain incident exposed sensitive information from affected Linux machines.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2022-02-03: Analysis by BleepingComputer (https://bleepingcomputer.com/news/security/pytorch-discloses-malicious-dependency-chain-compromise-over-holidays)
- 2022-02-03: PyTorch statement on compromised dependency (https://pytorch.org/blog/compromised-nightly-dependency)
- 2022-02-03: Compromised PyTorch Dependency Chain (https://atlas.mitre.org/studies/AML.CS0015)

## Sources

- 2022-02-03 MITRE ATLAS: Compromised PyTorch Dependency Chain https://atlas.mitre.org/studies/AML.CS0015
- 2022-02-03 pytorch.org: PyTorch statement on compromised dependency https://pytorch.org/blog/compromised-nightly-dependency
- 2022-02-03 BleepingComputer: Analysis by BleepingComputer https://bleepingcomputer.com/news/security/pytorch-discloses-malicious-dependency-chain-compromise-over-holidays

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.