What IT services does KGA provide?

KGA provides comprehensive IT support services including software installation and setup, SaaS system maintenance, application configuration, technical support, digital consulting (including website development), security services, and data management & backup solutions.

What areas do you cover?

Based in Kosai, Shizuoka, we provide remote support nationwide across Japan. On-site support is available primarily in the Tokai region.

Can I consult before signing a contract?

Yes, initial consultation and estimates are completely free. We will listen to your IT challenges and propose the optimal solution.

Is emergency support available?

Yes, the Premium plan includes 24-hour emergency support. The Standard plan also provides priority response during business hours.

Can you set up international TV apps?

Yes, we support the installation and configuration of international TV applications and media players. We help set up environments for legal access to international content.

Do you offer multilingual support?

We support 9 languages: Japanese, English, Portuguese, Korean, Chinese, Malay, Filipino, Vietnamese, and Spanish.

Are there any setup or hidden fees?

No. All prices displayed are final and tax-included. There are no setup fees, hidden charges, or surprise invoices. What you see is exactly what you pay.

Can I change plans later?

Yes. You can upgrade, downgrade, or cancel at any time. Upgrades take effect immediately and we will prorate the difference. Downgrades take effect at the next renewal cycle.

Which payment methods do you accept?

We accept all major credit cards (Visa, Mastercard, JCB, American Express) through Komoju, as well as bank transfers and convenience store payments in Japan. Invoicing is available for Business IT Plan customers.

Do you offer refunds?

Yes. We offer a 14-day money-back guarantee on all annual plans — no questions asked. Monthly Business IT Plan subscriptions can be cancelled at any time with prorated refunds for unused service.

What is the difference between the annual plans and the Business IT Plan?

Annual plans cover app configuration and support for individuals and small teams. The Business IT Plan is a comprehensive monthly subscription for companies that require website development, system management, automation, security, and a dedicated account manager.

Do you provide support in English?

Yes. Our team provides full multilingual support in Japanese, English, Portuguese, Korean, Chinese, Malay, Filipino, Vietnamese, and Spanish — by email, chat, and scheduled video calls.

PyPI: mistralai and guardrails-ai malware

What happened

In May 2026, two popular Python packages in the AI world were published to PyPI with malicious code:

guardrails-ai 0.10.1, on May 11 (around 6 PM Pacific). Researchers flagged it within about 2 hours and PyPI quarantined it. It was assigned CVE-2026-45758 (CVSS 9.6).
mistralai 2.4.6, Mistral AI's official Python SDK, available from May 12 (00:05 UTC), according to advisory GHSA-wx9m-wx4f-4cmg. The package has 716 dependents.

Both are supply-chain attacks: the project's legitimate code on GitHub wasn't changed, but someone pushed a tampered release to PyPI.

What the malicious code did

mistralai 2.4.6: on Linux, simply running import mistralai made the code download a second stage (transformers.pyz) from a hardcoded IP, with TLS verification off and all output suppressed, and run it in the background. According to the advisory, the upload bypassed PyPI Trusted Publishing and had no matching GitHub tag. The analysis ties it to the "mini-shai-hulud" campaign.
guardrails-ai 0.10.1: the code ran on install or import and allowed arbitrary code execution on the host. The maintainers say they saw no exfiltration through their systems, but recommend treating the machine's credentials as exposed.

What to do

Check whether any environment (dev machine, CI/CD, server, notebook) installed mistralai 2.4.6 or guardrails-ai 0.10.1.
mistralai: pin 2.4.5 or install from the verified tag. Look for /tmp/transformers.pyz.
guardrails-ai: upgrade to 0.10.2 or downgrade to 0.10.0.
On affected machines, rotate every reachable credential: GitHub tokens, cloud keys, package registry tokens and LLM API keys. Also check GitHub for unexpected workflows or repositories.
Going forward, pin versions (hashed lockfiles) and avoid unpinned pip install in pipelines.

Why it matters

AI projects concentrate API keys, cloud credentials and training data. A single compromised import in a CI pipeline can hand all of that to an attacker.

Sources

AI Threat Alert, GHSA-wx9m-wx4f-4cmg (mistralai 2.4.6): https://aithreatalert.com/cve/GHSA-wx9m-wx4f-4cmg
OpenCVE, CVE-2026-45758 (guardrails-ai 0.10.1): https://app.opencve.io/cve/CVE-2026-45758

Want to review the supply-chain security of your AI projects? KGA IT offers a free consultation: kga-it.com.

PyPI: Mistral AI SDK and guardrails-ai published with malware (May 2026)

What happened

What the malicious code did

What to do

Why it matters

Sources

Let's solve your technical challenges together.