Steps taken towards mitigation

torchtriton has been removed as a dependency for our nightly packages and replaced with pytorch-triton (pytorch/pytorch#91539) and a dummy package registered on PyPI (so that this issue doesn’t repeat)
All nightly packages that depend on torchtriton have been removed from our package indices at https://download.pytorch.org until further notice
We have reached out to the PyPI security team to get proper ownership of the torchtriton package on PyPI and to delete the malicious version
