Victim

Mistral AI

2 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 18, 2026 · last 18h ago

Timeline2 articles

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CrowdSec says the TanStack npm supply chain attack let an attacker copy 170 private GitHub repos via a former employee's retained account.

On May 22 an attacker used a GitHub OAuth token from a former CrowdSec employee whose organization access had been kept active, copying about 170 private repositories containing the web console, data science models, and blocklist consensus algorithm. CrowdSec attributes the access to CVE-2026-45321, the May 11 publication of 84 malicious versions of 42 TanStack npm packages that stole GitHub tokens, SSH keys, and cloud credentials from developer machines. The leaked archive also exposed email addresses of 83 users and names, emails, and investment context of 51 potential investors from 2020. The same campaign affected Mistral AI and OpenAI, and the only usable credential found in the leak, an AWS SNS publish token, saw an attempted misuse on August 17.

The Hacker Newsupdated Sep 19, 11:21 UTC · 14h agofirst Sep 19, 07:14 UTC · 18h agoData breach in the wild 2 sources CVE-2026-45321

An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang

Google revealed a Mandiant undercover analyst infiltrated TeamPCP, letting it warn hundreds of victims and disrupt the gang's supply chain attacks and extortion.

Google Threat Intelligence Group disclosed at LABScon that a Mandiant undercover analyst joined TeamPCP's roughly 12-member inner circle in March 2026, monitoring the group's CanisterWorm chat and its server of stolen credentials. TeamPCP compromised open source projects including Trivy, LiteLLM, Checkmarx infrastructure, TanStack, and Mistral AI, breaching more than a thousand companies with the self-spreading Mini Shai-Hulud worm. Google warned credential providers such as AWS and Microsoft to revoke stolen usernames, passwords, and access tokens, disrupting the group's planned extortion scheme. Alleged leaders Ruben Ian Thomson and Louis Michael Gaebler were arrested in Australia with FBI assistance.

WIRED · SecuritySep 18, 16:00 UTC · 1d agoThreat actor in the wild 2 sources2

Related CVEsby mentions

CVE-2026-453219.62%
Supply chain compromise: credential-stealing code in 42 @tanstack/* npm packages
CVE-2026-45321 is a supply chain compromise in which 84 malicious versions across 42 @tanstack/* npm packages (including @tanstack/react-router, @tanstack/react-start, @tanstack/history, and related router/start packages) were published to the npm registry on 2026-05-11 between roughly 19:20 and 19:26 UTC, authenticated through TanStack's legitimate GitHub Actions OIDC trusted-publisher binding. The attacker chained three known weakness classes — a pull_request_target 'Pwn Request' misconfiguration, GitHub Actions cache poisoning across the fork-to-base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — allowing publication under a trusted identity without modifying the publish workflow. Each affected package received exactly two malicious versions carrying credential-stealing malware, so developers, CI pipelines, or downstream builds that installed them could have npm, GitHub, and cloud credentials extracted; related reporting (FBI, StepSecurity) links the campaign to stolen cloud credentials and a self-spreading 'Mini Shai-Hulud' worm that also hit packages in other ecosystems such as Mistral AI and Guardrails AI. Exposure is limited to consumers who installed the two malicious versions published per package during the exposure window; other users of these widely deployed libraries were not affected by the malicious publishes. Exploitation is confirmed in the wild: the issue was added to CISA's Known Exploited Vulnerabilities catalog on 2026-05-27 with known ransomware use, and EPSS estimates a 2.3% probability of exploitation in the next 30 days (83rd percentile).
· tanstack @tanstack/arktype-adapter · tanstack @tanstack/eslint-plugin-router KEV ransomware PoC ×2large

Appears with

vendor OpenAI 2 vendor TanStack 2 vendor Mistral AI 2 victim OpenAI 2 organization FBI 1 organization Google Threat Intelligence Group 1 product AWS SNS 1 product GitHub OAuth token 1 product LiteLLM 1 product TanStack 1 product TanStack npm packages 1 product Trivy 1 vendor AWS 1 threat actor ShinyHunters 1 vendor CrowdSec 1 vendor GitHub 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.