Unverified50% confidenceFactExact time
Typical supply chain attack vectors targeting model repositories include embedding executable malicious code in pickle-format model weight files, replacing datasets for data poisoning, and modifying model card code examples to plant backdoors.
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedA software supply chain attack refers to an attack method in which the attacker poisons upstream dependency components to infect downstream users en masse.72% similarUnverifiedFor platforms such as Hugging Face, attacks have been historically documented in which arbitrary code execution is triggered during model loading via malicious pickle files.72% similarUnverified恶意开发者的供应链攻击包括域名近似劫持、工具名称冲突、偏好诱导攻击、工具投毒、跑路服务、跨服务器影子劫持、命令注入等70% similarUnverifiedSupply chain attacks plant malicious code indirectly by contaminating third-party libraries that a project depends on, rather than directly breaching the target project69% similarUnverified在具备工具调用能力的 Agentic 系统中，一次成功的提示注入可能导致数据泄露、恶意代码执行甚至供应链攻击69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/996953API
curl https://kongchang.com/api/v1/knowledge/claims/996953MCP
get_claim(id=996953)