Vendor
critical
advisory
Malicious Dropper Found in mistralai PyPI Package 2.4.6
2 rules 1 TTP 3 IOCsThe mistralai PyPI package version 2.4.6 contains a malicious dropper that executes on import on Linux, downloading and executing a second-stage payload from a remote IP address, potentially leading to arbitrary code execution.
mistralai client-python
supply-chain
malware
python
2r
1t
3i
critical
threat
Shai-Hulud Malware Used in Supply Chain Attack via Compromised npm Packages
3 rules 7 TTPs 3 IOCsThe Shai-Hulud malware was used in a large-scale software supply-chain attack compromising hundreds of packages across open-source software ecosystems by compromising developer secrets and CI/CD pipelines.
router +11
TeamPCP
supply-chain
supply-chain-attack
npm
pypi
credential-theft
shai-hulud
3r
7t
3i
high
threat
Mini Shai-Hulud Campaign Compromises npm Packages
3 rules 6 TTPs 8 IOCsThe Mini Shai-Hulud supply chain campaign, attributed to TeamPCP, has compromised several npm packages, including those within the @tanstack, @uipath, and @mistralai namespaces, leading to credential theft and potential further compromise.
@tanstack/react-router +2
TeamPCP
supply-chain
npm
malware
3r
6t
8i