Skip to content
Threat Feed
Subscribe

Vendor

Mistral AI

5 briefs RSS
high advisory

Mistral Vibe: Remote code execution via Git filter drivers (CVE-2026-122134)

Mistral Vibe versions before 2.25.7 are vulnerable to remote code execution due to the automatic execution of git commands on untrusted repositories.

Mistral Vibe
1t 1c
high advisory

Shai-Hulud Campaign Activity

Tracking brief for the Shai-Hulud campaign; individual sightings are folded in as reported.

jscrambler 8.14.0 +102 campaign shai-hulud
20i updated
critical advisory

Malicious Dropper Found in mistralai PyPI Package 2.4.6

The mistralai PyPI package version 2.4.6 contains a malicious dropper that executes on import on Linux, downloading and executing a second-stage payload from a remote IP address, potentially leading to arbitrary code execution.

mistralai client-python supply-chain malware python
2r 1t 3i
critical threat

Shai-Hulud Malware Used in Supply Chain Attack via Compromised npm Packages

The Shai-Hulud malware was used in a large-scale software supply-chain attack compromising hundreds of packages across open-source software ecosystems by compromising developer secrets and CI/CD pipelines.

router +11 TeamPCP supply-chain supply-chain-attack npm pypi credential-theft shai-hulud
3r 7t 3i
high threat

Mini Shai-Hulud Campaign Compromises npm Packages

The Mini Shai-Hulud supply chain campaign, attributed to TeamPCP, has compromised several npm packages, including those within the @tanstack, @uipath, and @mistralai namespaces, leading to credential theft and potential further compromise.

@tanstack/react-router +2 TeamPCP supply-chain npm malware
3r 6t 8i