Unverified50% confidenceTradeoffExact time
Malicious actors planting backdoored models or tampering with weights on platforms such as Hugging Face could constitute supply chain attacks.
1
Sources
50%
Confidence
Long-term
Relevance
9/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.73% similarUnverifiedBetween 2023 and 2024, security researchers discovered malicious models on the Hugging Face platform multiple times, with attackers executing attacks by embedding malicious code in model serialization files.72% similarUnverified攻击者常借助混淆技术隐藏恶意脚本诱导用户复制粘贴运行，这类手法被称为剪贴板劫持或社会工程学注入71% similarUnverifiedIn 2024, Hugging Face's Spaces service suffered a security breach, and attackers obtained access tokens belonging to some users.71% similarUnverified数据投毒攻击中，清洁标签攻击允许攻击者在不修改样本标签的情况下植入后门，特洛伊木马攻击通过特定触发词激活预设的恶意行为71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/941108API
curl https://kongchang.com/api/v1/knowledge/claims/941108MCP
get_claim(id=941108)