News for hackers. Stuff that matters.

A comment on Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library. Parent comment

Re:Shai-Hulud Themed Malware Found in the PyTorch Lightning ... by throwatdem12311 on Thursday April 30, 2026 @08:11PM (#47969959)
Stop blaming the LLM for your laziness and lack of due diligence.
[ Parent | on HN ]
Re:Shai-Hulud Themed Malware Found in the PyTorch Lightning ... by zarzavat on Friday May 01, 2026 @12:00AM (#47971169)
Indeed, I also use LLMs to suggest dependencies but:

- I ask the LLM for multiple options

- I tell it what I need and what I don't need

- I then look at the packages it has suggested. Sometimes LLMs suggest unmaintained packages with 5 downloads a month just because it came at the top of a web search.

- if it's not a very well known project, I look at the code, I have received vibecoded dependency suggestions before that don't even function

LLMs are useful resources for "getting the pulse of the ecosystem", but just pressing enter is crazy.

[ Parent | on HN ]
Re:Shai-Hulud Themed Malware Found in the PyTorch Lightning ... by throwatdem12311 on Friday May 01, 2026 @12:27AM (#47971290)
exactly
[ Parent | on HN ]