The PyPI package for the PyTorch Lightning AI training library was compromised in versions 2.6.2 and 2.6.3 with malicious code. The injected Mini Shai-Hulud themed payload executes credential-stealing malware whenever the library is imported by a user. Developers should avoid these specific versions to prevent unauthorized access to their sensitive data.