Techub News, citing Decrypt, reports that Microsoft’s threat intelligence team says attackers have inserted malicious code into the Mistral AI software package, which is distributed via the PyPI platform. The code could steal developers’ credentials and may damage Linux systems. Mistral states there is no evidence that its infrastructure has been compromised and recommends isolating affected systems and changing credentials. The attack is related to the “Shai-Hulud” malware campaign, which has targeted the software supply chain since September.