Skip to content
Threat Feed

Product

Mistralai Client-Python

1 brief RSS
critical advisory

Malicious Dropper Found in mistralai PyPI Package 2.4.6

The mistralai PyPI package version 2.4.6 contains a malicious dropper that executes on import on Linux, downloading and executing a second-stage payload from a remote IP address, potentially leading to arbitrary code execution.

mistralai client-python supply-chain malware python
2r 1t 3i