# mistralai-pypi-package-v2-4-6-backdoored-with-credential-stealer: MistralAI PyPI Package v2.4.6 Backdoored With Credential Stealer

> MistralAI PyPI Package v2.4.6 Backdoored With Credential Stealer is a critical-severity supply chain compromise issue in mistralai, a package. Affected: ==2.4.6.

- **Canonical URL:** https://catalog.anomity.ai/vuln/mistralai-pypi-package-v2-4-6-backdoored-with-credential-stealer
- **Aliases:** ti-023
- **Severity:** critical
- **Attack type:** Supply chain compromise, Credential theft
- **Component:** mistralai (package)
- **Package:** mistralai (pypi)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-05-12
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/mistralai-pypi-package-v2-4-6-backdoored-with-credential-stealer

## Summary

The mistralai PyPI package v2.4.6 was published May 12 at 00:05 UTC containing injected malicious code that runs on import and spawns a background process to harvest credentials from ~/.aws, ~/.config/gcloud, ~/.ssh, browser cookie stores, and AI tool config directories. Microsoft removed the package within 3 hours, but the window was sufficient for an estimated 8,500 installs across Mistral SDK users, including agentic workflows that pin to "latest."

## Affected versions

| Affected | Fixed in |
| --- | --- |
| ==2.4.6 | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if you run mistralai ==2.4.6.

## How do I fix it?

Uninstall mistralai 2.4.6 and reinstall 2.4.7+. Rotate Mistral, AWS, GCP, and SSH credentials on any host that installed v2.4.6 between May 12 00:05–03:05 UTC. Block PyPI auto-upgrade in CI without lockfile pinning. Scan for outbound traffic to known stealer C2 endpoints.

## References

- article: https://cybersecuritynews.com/mistralai-pypi-package-compromised/amp/

## Related vulnerabilities

- [litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook](https://catalog.anomity.ai/vuln/litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook) — critical
- [memtensor-compromise-poisoned-openclaw-memory-plugin-and-memoryos](https://catalog.anomity.ai/vuln/memtensor-compromise-poisoned-openclaw-memory-plugin-and-memoryos) — critical
- [atomic-arch-aur-npm-supply-chain-compromise-atomic-lockfile](https://catalog.anomity.ai/vuln/atomic-arch-aur-npm-supply-chain-compromise-atomic-lockfile) — high
- [miasma-npm-worm-compromises-31-red-hat-cloud-services-packages-via-ci](https://catalog.anomity.ai/vuln/miasma-npm-worm-compromises-31-red-hat-cloud-services-packages-via-ci) — critical
- [ghostaction-returns-a-security-audit-yml-workflow-pushed-from](https://catalog.anomity.ai/vuln/ghostaction-returns-a-security-audit-yml-workflow-pushed-from) — high
- [tensorlake-npm-sdk-0-5-144-compromised-by-a-shai-hulud-chaindrop-worm](https://catalog.anomity.ai/vuln/tensorlake-npm-sdk-0-5-144-compromised-by-a-shai-hulud-chaindrop-worm) — critical

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=mistralai-pypi-package-v2-4-6-backdoored-with-credential-stealer