Unverified50% confidenceFactExact time
Supply chain poisoning is a residual risk that offline environments cannot fully eliminate, since the frameworks, CUDA drivers, container images, and dataset shards that training depends on all come from outside.
1
Sources
50%
Confidence
Long-term
Relevance
10/23/2026
First Seen
Sources
Related Entities
Related Claims
Unverified供应链攻击的危险性在于攻击的传播效应，被篡改的上游组件可能影响所有依赖它的下游系统67% similarUnverified智能体供应链风险主要发生在运行时动态加载有漏洞的组件，使传统的'一次扫描、持续信任'模式失效67% similarUnverifiedThe common characteristic of supply chain poisoning attacks is that the attacker does not compromise the target system directly but instead contaminates upstream resources on which the target system depends.65% similarUnverifiedSupply chain attacks plant malicious code indirectly by contaminating third-party libraries that a project depends on, rather than directly breaching the target project64% similarUnverifiedOpen-source supply chain security incidents in recent years include malicious package poisoning in the npm ecosystem, phishing attacks on PyPI, and the XZ Utils backdoor incident.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1091458API
curl https://kongchang.com/api/v1/knowledge/claims/1091458MCP
get_claim(id=1091458)