Microsoft Threat Intelligence said attackers placed malicious code inside a Mistral AI software download distributed through a Python package.