An attacker registered torchtriton on PyPI matching PyTorch's internal private package name. The malicious package exfiltrated SSH keys, .gitconfig files, and passwords via DNS tunneling. ~2,700 systems were affected over the Christmas holiday period. Meta/Facebook was a primary target.
Sources: PyTorch blog
PACKAGE_NAME_MISMATCH + PACKAGE_REGISTRY_MISMATCH purpose-built for this attack class
| Tool | Verdict | Details |
|---|---|---|
| OSS Risk Guard | Caught | PACKAGE_NAME_MISMATCH + PACKAGE_REGISTRY_MISMATCH purpose-built for this attack class |
| Socket | Caught | Dependency confusion detection |
| Snyk | Missed | No dependency confusion detection |
| Sonatype (Nexus) | Caught | Nexus Firewall controls repository resolution layer |
| Black Duck | Missed | No dependency confusion detection |
| Endor Labs | Missed | No dependency confusion detection |