Compromised Mistral AI and TanStack packages may have exposed GitHub, cloud and CI/CD credentials in 'mini Shai Hulud' malware infection — supply-chain campaign spreads across npm and AI developer ecosystems like wildfire
· Source: tomshardware.com
In short
Microsoft Threat Intelligence is investigating a compromise in the mistralai PyPI package where malicious code downloaded and executed malware on Linux systems, likely as part of the broader "Mini Shai-Hulud" supply-chain campaign targeting developer ecosystems. Additional compromises in several TanStack JavaScript packages and Mistral npm SDK packages have been reported, raising concerns over credential theft and the exposure of GitHub, cloud, and CI/CD credentials. Organizations are advised to isolate affected hosts, block malicious IPs, hunt for indicators, and rotate exposed credentials immediately.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 20, 2026: AI-Powered Automation and Control Towers Drive Supply Chain Transformation
Tags: supply-chain, security, credentials, malware, npm, PyPI