A malicious PyPI package named torchtriton shadowed a PyTorch dependency (dependency confusion), exfiltrating system info, hostnames, and SSH keys.
Affected PyTorch nightly users over the 2022 holidays; PyTorch renamed the dependency in response.
A public package shadowed a private/internal dependency name so build tools resolved the attacker's version.
Attacks like this are why dependency provenance matters. Scan your manifests against the Gold database; a free CI gate that blocks risky dependencies before they merge is coming soon.