THREATNOIR
Subscribe
Back to Feed
Supply ChainMay 12, 2026

Following the initial report from @wiz_io on compromised MistralAI packages, our artifact‑scannin...

Shai Hulud malware discovered in additional compromised MistralAI NPM packages for GCP and Azure.

Read at source
Vendor Watch

Run MistralAI?

Get an email when a reviewed story names MistralAI, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

Summary

Following Wiz's initial disclosure of compromised MistralAI packages, security researchers identified additional NPM artifacts infected with the Shai Hulud malware. The affected packages include mistralai/mistralai-gcp v1.7.3 and mistralai/mistralai-azure v1.7.3, which provide direct cloud integration functionality. This represents a broader supply chain attack affecting popular AI/ML libraries used by cloud developers.

Indicators of Compromise

  • malware — Shai Hulud

Entities

MistralAI (vendor)Wiz (vendor)NPM (technology)Google Cloud Platform (technology)Microsoft Azure (technology)