Skip to content

Commit e4ef18a

Browse files
authored
Update 2022-12-31-compromised-nightly-dependency.md
1 parent 75d0a5b commit e4ef18a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

_posts/2022-12-31-compromised-nightly-dependency.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ $ pip3 cache purge
1313

1414
PyTorch-nightly Linux packages installed via pip during that time installed a dependency, torchtriton, which was compromised on the Python Package Index (PyPI) code repository and ran a malicious binary. This is what is known as a supply chain attack and directly affects dependencies for packages that are hosted on public package indices.
1515

16-
**NOTE:** Users of the PyTorch **stable** packages **are not** affected by this issue.**
16+
**NOTE:** Users of the PyTorch **stable** packages **are not** affected by this issue.
1717

1818

1919
## How to check if your Python environment is affected

0 commit comments

Comments
 (0)