Microsoft: Malicious code implanted in Mistral AI software package

Techub News, according to Decrypt, Microsoft's Threat Intelligence unit stated that attackers inserted malicious code into a Mistral AI software package distributed via the PyPI platform, which can steal developer credentials and potentially compromise Linux systems. Mistral said there is no evidence that its infrastructure was compromised, and recommended isolating affected systems and replacing credentials. This attack is linked to the "Shai-Hulud" malware campaign, which has been targeting the software supply chain since September.