Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/…

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and laun
Ranked #34 on backlist 2026-05-12 (12 May 2026 UTC) · by (Microsoft Threat Intelligence) ·

How it ranks: Backlist reads my Twitter/X timeline, scores every tweet for substance with an LLM rubric (not engagement), and publishes the daily top picks with a one-line takeaway. Curated by Surya Dantuluri.