News Explorer — Malicious Code Inserted Into Mistral AI Software Package Stole Developer Credentials

Decrypt

Malicious Code Inserted Into Mistral AI Software Package Stole Developer Credentials

Malicious code was inserted into a Mistral AI software package distributed through PyPI, running automatically on Linux systems to download and launch a second malicious file. The malware primarily stole developer login information and access tokens, avoiding Russian-language systems and targeting files in Israel or Iran.