[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-mistral-says-no-new-hack-but-leaked-code-looks-recycled":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},7272,"mistral-says-no-new-hack-but-leaked-code-looks-recycled","Mistral Says No New Hack, but Leaked Code Looks Recycled","A forum seller claims a new Mistral AI breach, but the leaked files overlap with May's supply-chain hack, suggesting a resale, not a new intrusion.","Someone is selling what they call Mistral AI's source code again, and Mistral says it isn't true.\n\nA seller using the handle \"mrwho\" posted a listing titled \"Selling mistral.ai Source Code\" on a cybercrime forum on September 16, 2026, priced in Monero only, and tried to steer buyers toward Session or Telegram, according to The CyberSec Guru. Mistral says its investigation \"found no evidence to support this claim,\" though it has not confirmed whether the code itself is genuine. No customer data has turned up in the samples reviewed so far, and nobody has produced a file dated after May 12, 2026, when Mistral's last confirmed breach ended. FrenchBreaches, which reviewed the 339-file tree mrwho shared, found at least four repository names, mistral-inference-private, mistral-inference-internal, mistral-finetune-internal, and mistral-common-internal, that also appeared in TeamPCP's May listing.\n\nThat overlap matters more than the word \"hack\" does. In May, the Mini Shai-Hulud worm compromised Mistral's SDK packages through poisoned TanStack, npm, and PyPI dependencies, and TeamPCP tried to sell roughly 450 of the company's repositories for $25,000. If the September files predate that cleanup, this is not a new breach, it is the same stolen goods finding a new buyer, which says less about Mistral's current defenses and more about how long stolen source code keeps circulating.\n\nThe account selling it, \"mrwho,\" joined the forum this month with four posts and a thin reputation score despite claiming a top-tier rank, the kind of profile that makes paying in crypto look less like due diligence and more like a bet.","[\"mistral-ai\",\"data-breach\",\"supply-chain-attack\",\"cybersecurity\"]","2026-09-22T21:05:00.000Z","2026-09-23T00:38:27.416Z","2026-09-23T00:38:32.308Z","published",null,[],"security",[26,27,28,29],"mistral-ai","data-breach","supply-chain-attack","cybersecurity",[31],{"name":32,"url":33},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fmistral-denies-a-fresh-security-breach-but-the-code-on-sale-looks-a-lot-like-mays-leak",0,{"sections":36},[37,42,45,50,55,60,65,70,75,80,85,90,95,100],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",4424,"2026-09-24T04:00:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":41},"Security",724,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",380,"2026-09-23T22:53:43.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",225,"2026-09-24T09:46:10.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",174,"2026-09-24T10:10:29.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Science","science",136,"2026-09-24T09:00:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Consumer Tech","consumer-tech",116,"2026-09-24T00:51:49.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",85,"2026-09-23T20:00:00.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Dev Tools","dev-tools",79,"2026-09-22T22:21:13.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Startups","startups",66,"2026-09-23T17:28:38.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Gaming","gaming",45,"2026-09-22T15:35:06.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"General","general",43,"2026-09-21T23:48:56.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Reviews","reviews",27,"2026-09-22T13:00:00.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]