PyTorch-Nightly PyPI Package Compromised with Malicious Dependency

# PyTorch-Nightly PyPI Package Compromised with Malicious Dependency

https://gcdradar.vercel.app/incidents/pytorch-nightly-pypi-package-compromised-with-malicious-depe · AIR-2023-0010 · closed 2023-04-14

- Lane: Supply chain
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2023-03-31 (happened 2022-12-25)
- AI role: Attack on AI
- Products: PyTorch-nightly

## Summary

Threat actors uploaded a malicious dependency matching the name of a PyTorch-nightly package to PyPI, performing a supply chain attack. The compromised packages exposed sensitive data on infected Linux machines before PyTorch announced the incident.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2023-03-31: Analysis by BleepingComputer (https://bleepingcomputer.com/news/security/pytorch-discloses-malicious-dependency-chain-compromise-over-holidays)
- 2023-03-31: PyTorch statement on compromised dependency (https://pytorch.org/blog/compromised-nightly-dependency)
- 2023-03-31: Compromised PyTorch Dependency Chain (https://atlas.mitre.org/studies/AML.CS0015)
- 2023-03-31: AVID-2023-V015: Linux packages for PyTorch's pre-release version, called Pytorch-nightly, were compromised from December 25 to 30, 2022 by a malicious binary uploaded to the Python Package Index (PyPI) code repository. (https://github.com/avidml/avid-db/blob/main/vulnerabilities/2023/AVID-2023-V015.json)

## Sources

- 2023-03-31 AVID: AVID-2023-V015: Linux packages for PyTorch's pre-release version, called Pytorch-nightly, were compromised from December 25 to 30, 2022 by a malicious binary uploaded to the Python Package Index (PyPI) code repository. https://github.com/avidml/avid-db/blob/main/vulnerabilities/2023/AVID-2023-V015.json
- 2023-03-31 MITRE ATLAS: Compromised PyTorch Dependency Chain https://atlas.mitre.org/studies/AML.CS0015
- 2023-03-31 pytorch.org: PyTorch statement on compromised dependency https://pytorch.org/blog/compromised-nightly-dependency
- 2023-03-31 BleepingComputer: Analysis by BleepingComputer https://bleepingcomputer.com/news/security/pytorch-discloses-malicious-dependency-chain-compromise-over-holidays

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.