Shai-Hulud 테마 악성코드가 PyTorch Lightning AI 학습 라이브러리에서 발견됨 | Semgrep

This attack marks a sophisticated evolution in supply chain threats by demonstrating cross-platform worm propagation from PyPI to npm. It specifically targets AI developers by weaponizing popular tools like Claude Code and VS Code, highlighting the increasing automation of data exfiltration and persistence in modern cyberattacks.