GHSA-jgg6-4rpr-wfh7: Broken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp

Summary

Compromised versions of @mistralai/mistralai (2.2.2, 2.2.3, 2.2.4), @mistralai/mistralai-azure and @mistralai/mistralai-gcp (1.7.1, 1.7.2, 1.7.3) were published to npm between May 11 at 22:45 UTC and May 12 at 01:53 UTC as part of a supply chain attack linked to the TanStack incident. The source says an affected developer device was involved and that Mistral infrastructure shows no sign of compromise. The embedded dropper is broken: setup.mjs references tanstack_runner.js while the payload is named router_init.js, so the payload never runs.

Mitigation

Stop using the affected package versions immediately. Clean systems where one of these packages has been installed. Check lockfiles, build artifacts, container images, package caches and private mirrors for affected versions, and remove the packages even though the dropper is broken.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• @mistralai/mistralainpmLLM dependency since 2023-12-07 · 3 tracked dependents

Related items

• HighCVE-2026-109429: Mistral Vibe command permission gate bypass via hidden command substitutionSame vendor · NVD/CVE Database
• HighCVE-2026-109428: Mistral Vibe permission bypass via backslash-newline command parsingSame vendor · NVD/CVE Database
• MediumCVE-2026-67989: crmne/ruby_llm polynomial-time regex denial of service in Mistral model matchingSame vendor · NVD/CVE Database
• HighCVE-2026-93993: Mistral Vibe remote code execution through git hooks in worktree creationSame vendor · NVD/CVE Database
• HighCVE-2026-87988: Mistral Vibe arbitrary file access by bypassing workspace restrictionsSame vendor · NVD/CVE Database