
Microsoft Uncovers Malware in Mistral AI PyPI Package
Microsoft Threat Intelligence reported that attackers inserted malicious code into a Mistral AI package on PyPI, which steals credentials from Linux systems as part of the Shai-Hulud campaign. The supply chain compromise tied to a TanStack incident highlights ongoing risks to developer tools on PyPI and NPM repositories.
