You're looking at StableBuild's Deleted PyPI mirror - where we index all deleted packages from the Python package registry.
lightning was reported malicious
OSV:MAL-2026-3201 - Malicious code in lightning (PyPI)

lightning
2.5.4

This version was deleted from PyPI around 2026-04-30. Installing fails with:
$ pip3 install lightning==2.5.4 ERROR: Could not find a version that satisfies the requirement lightning==2.5.4
View other deleted versions of lightning

Install through StableBuild

You can install this package from StableBuild's PyPI snapshots from before the version was deleted:
pip3 install \ -i https://YOUR_API_KEY.pypimirror.stablebuild.com/2026-04-29/ \ lightning==2.5.4
Sign up for StableBuild to get an API key (it's free and takes <60 seconds!)

Or, download files manually

And install manually via pip:
lightning-2.5.4-py3-none-any.whl (805.9KB)
lightning-2.5.4.tar.gz (622.4KB)