Supply chain compromise in mistralai Python packagegithub.com/mistralai 6 pointsmeander_water4 months ago3 commentsSaveHideCopy link On HNComments−evilmonkey194moI use mistralai and their API is quite good. Luckily I like to pin the versions and upgrade manually a little bit later just in case of this kind of unfortunate events.−ilvez4moHave version lock as well, but dependency resolution seems to be messed up for a time. Started unrelated upgrade action and got blocked :)−meander_waterOP4moThis appears to be part of the same Mini Shai-Hulud campaign affecting Tanstack Router https://www.securityweek.com/tanstack-mistral-ai-uipath-hit-...
Comments
I use mistralai and their API is quite good. Luckily I like to pin the versions and upgrade manually a little bit later just in case of this kind of unfortunate events.
Have version lock as well, but dependency resolution seems to be messed up for a time. Started unrelated upgrade action and got blocked :)
This appears to be part of the same Mini Shai-Hulud campaign affecting Tanstack Router https://www.securityweek.com/tanstack-mistral-ai-uipath-hit-...