Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

semgrep.dev

Post reply on HN
Print view View original

91–100 of 196 posts

Re: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

#91

Post by eddythompson80 »

avaer wrote: post #85
mkeeter wrote: post #3

A repository search shows 2.2K repos with the text "A Mini Shai-Hulud has Appeared", all created within the past day: https://github.com/search?q=A%20Mini%20Shai-Hulud%20has%20Ap...

Why can't GitHub get on the case and just block any repo where the README matches the regex? I thought they'd have learned their lesson the last time it happened. This malware isn't even trying. Then again it's Microsoft so they're not even trying either.

6 minutes later an HN submission "GitHub blocks your account if you mention X in the README" with a top comment "This is absurd, are they just doing regex matching to check for malware?"

Re: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

#92

Post by zelphirkalt »

mixedbit wrote: post #58

When I was doing Fast.AI Deep Learning course, I was surprised by the number of Python dependencies machine learning projects bring. Web front-end projects were always considered very third-party dependencies heavy, but to me, the machine learning ecosystem looks much more entangled. In addition, unlike web development, which is considered security critical and has over the many years accumulated a lot of wisdom and…

There are many people in that ecosystem, who are not primarily software engineers. Some just learned some coding along the way. Some are mathematicians. Some are devs who are AI drunk or something. Some have the mindset of "code doesn't matter any longer, if it works it works". For many proper dependency management is just a chore, that they don't want to care about. These things come together in various ML projects, even though ML projects should be amongst the projects most focused on reproducibility.

Re: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

#93

Post by andymcsherry »

gcapu wrote: post #35

On GitHub, I saw this message from April 20, and I’m a bit confused. "deependujha hi @thebaptiste, thanks for inquiring. Release of 2.6.2 is blocked due to some internal reasons. Will notify once release is made. " I'd hate it if they knew of the problem that long ago and didn't warn until now. If someone has more info and can clarify I'd be thankful. https://github.com/Lightning-AI/pytorch-lightning/issues/216...

Andy from Lightning here. The malicious packages were published today at 12:45 PM UTC to PyPi. Before that, there were no affected distributions, and we were unaware of any leak. The original release on Github did not contain the issue, but we have taken it down to prevent any confusion.

Re: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

#94

Post by andymcsherry »

lysace wrote: post #65

Is there some string to recursively grep for to know if you have been infected?

Andy from Lightning here. The malicious file that gets installed has this signature:

  router_runtime.js

  SHA256 5f5852b5f604369945118937b058e49064612ac69826e0adadca39a357dfb5b1
  SHA1 f1b3e7b3eec3294c4d6b5f87854a52471f03997f
  MD5 40d0f21b64ec8fb3a7a1959897252e09

Re: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

#95

Post by lysace »

andymcsherry wrote: post #94
lysace wrote: post #65

Is there some string to recursively grep for to know if you have been infected?

Andy from Lightning here. The malicious file that gets installed has this signature: router_runtime.js SHA256 5f5852b5f604369945118937b058e49064612ac69826e0adadca39a357dfb5b1 SHA1 f1b3e7b3eec3294c4d6b5f87854a52471f03997f MD5 40d0f21b64ec8fb3a7a1959897252e09

Thanks!

Re: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

#96

Post by CoastalCoder »

eddythompson80 wrote: post #39
JohnMakin wrote: post #33

Earlier quoted context omitted.

People are ramming tons of code into places without ever looking at it, it would follow that supply chain attacks would increase thusly.

Yeah, and ultimately no body cares. Everyone assumes it’s just some process miss, and we need to add another step to the process and move on. Fuck ups that would have killed the credibility of projects 10 years ago are now treated as “eeh what are you gonna do. Sometimes you ship malware. Will look into it”

> Yeah, and ultimately no body cares.

I assume you're using hyperbole.

Some of us are very aware and concerned about the risk. But like Cassandra from Greek mythology, we see the coming disaster and feel powerless to stop it.

Re: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

#97

Post by ElectricalUnion »

androiddrew wrote: post #89

Another exploit Mythos didn't find. Isn't the god machine kind of failing us?

Forgot to do the various various maintenance rituals and prayers of function, so now the machine spirit's disposition is poor.

Re: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

#98

Post by hulahoof »

crabbone wrote: post #64
wlkr wrote: post #32

This might just be the frequency illusion at play, but there seem to have been a number of high-profile supply chain attacks of late in major packages. There are several articles on the first few pages of HN right now with different cases. Looking back ten years to `left-pad`, are there more successful attacks now than ever? I would suspect so, and surely the value of a successful attack has also increased, so are we…

> Looking back ten years to `left-pad`, are there more successful attacks now than ever? I can't vouch for the number of attacks, but, and since we are talking about Python, nothing substantially changed since the time of `left-pad`. The same bad things that enabled supply chain attacks in Python ten years ago are in place today. However, it looks like there are more projects and they are more interconnected than bef…

left-pad was an npm issue

Re: Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

#99

Post by ajb »

bigfluffydonkey wrote: post #31
ks2048 wrote: post #26

I'm curious what they do with various kinds of credentials if they get access. I can see trying to steal crypto, but what do they do if they get some AWS credentials? Try to run some crypto mining instances? Try to use your account for other types of crimes? Or is it mainly trying to steal data and then ask for ransoms?

It's always crypto. A client got some AWS credentials stolen and without anyone checking the account, the hacker managed to spin up big EC2 instances across many regions. The bill after a month as I recall was around 100K. Since the activity was clearly fraudulent the bill was forgiven eventually. So remember to lock down your AWS keys permissions...

When that happened to a former employer AWS was calling us within a day. Worth making sure a real phone number is on there, as that's how they contact you for anything serious (and also if your finance dept decided to change the credit card without telling anyone)
Post reply on HN