Security News Mistral AI among many others compromised!

[Khushal]

Content source

https://safedep.io/mass-npm-supply-chain-attack-tanstack-mistral/

TL;DR
A coordinated supply chain attack on May 11, 2026 compromised over 170 npm packages and 2 PyPI packages, totaling 404 malicious versions. The attacker hit the entire TanStack router ecosystem (42 packages), Mistral AI’s SDK suite (on both npm and PyPI), UiPath’s automation tooling (65 packages), OpenSearch (1.3M weekly npm downloads), and Guardrails AI (PyPI). This is one of the largest coordinated registry poisoning events observed in 2026, and the first to span both npm and PyPI in a single campaign.

Affected packages include (full list in appendix):

Mass Supply Chain Attack Hits TanStack, Mistral AI npm and PyPI Packages

Over 400 compromised npm package versions and at least 2 PyPI packages published in a coordinated supply chain attack targeting TanStack, Mistral AI, UiPath, OpenSearch, guardrails-ai, and dozens of other packages.

safedep.io

 

[Spiff]

@Khushal,
Is there any reason to post the subject line in all caps?

 

[Khushal]

@Khushal,
Is there any reason to post the subject line in all caps?

No it was just to grab attention albeit it can be an eyesore for some!

 

[The_King]

No it was just to grab attention albeit it can be an eyesore for some!

Personally, I find all-caps easier to read, but I know it can be a bit polarizing for some people. It’s never bothered me, but it’s probably worth checking the forum rules to see if they have specific guidelines for headings.

Also, with the rise in supply chain attacks, I’ve actually started hesitating to update anything lately.

Spoiler: Youtube video

 

[Spiff]

it’s probably worth checking the forum rules to see if they have specific guidelines for headings.

Not specific for headers, but the forum rules state:
Important Notes
Other general rules include:
Excessive text formatting (bold, caps, font size) is not allowed. Use text formatting to highlight short passages only.

Regardless of whether it is allowed or not, netiquette says it is better not to use all caps. It is frowned upon.

 

[lokamoka820]

@Spiff
If I understand correctly the issue of writing the subject title in capital letters, you might use the new theme, as it uses capital letters by default. Here is the subject title in both themes:

New theme:


Old theme:

 

[harlan4096]

I edited