A malicious PyPI package named torchtriton shadowed a PyTorch dependency (dependency confusion), exfiltrating system info, hostnames, and SSH keys.
Affected PyTorch nightly users over the 2022 holidays; PyTorch renamed the dependency in response.
A public package shadowed a private/internal dependency name so build tools resolved the attacker's version.
Attacks like this are why dependency provenance matters. Scan your manifests against the Gold database, or add the free CI gate to block risky dependencies before they merge.