News for hackers. Stuff that matters.

A comment on Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library. Parent comment

Re:Shai-Hulud Themed Malware Found in the PyTorch Lightning ... by nrengan on Thursday April 30, 2026 @05:04PM (#47968206)
Well, people weren't checking CVEs before pip install before CC either, CC just scaled the habit to a larger audience at a faster cadence. The blast radius for day-zero compromises is what changed.
[ Parent | on HN ]
Re:Shai-Hulud Themed Malware Found in the PyTorch Lightning ... by ShyCodeGardener on Friday May 01, 2026 @09:01AM (#47974289)
How has the blast radius changed though? The vibecoders that weren't developers before? If someone switched from pip installing themselves to having Claude do it, I don't see how that increased the blast radius.
[ Parent | on HN ]