.🫟

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments. The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran. To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.

deepseek is raising a monster $7 billion round at $50B val making it china's largest ever AI raise but what shocks me the most is the founder, liang wenfeng: > he's personally contributing 40% of the round himself. $3 billion. > he owns 90 PERCENT of the company (unheard of at this valuation) > deepseek was founded inside his hedge fund, one of China's most successful funds. guys a fucking beast. this round is meant to achieve 2 things: 1. acquire as much compute to push out new deepseek models more often 2. turn deepseek revenue-positive by pushing new enterprise products (same tactic as OAI and anthropic) deepseek v4.1 is expected to release soon.