#SBOM

Model Supply Chain Attacks: The npm Moment for AI

Poisoned model weights on public hubs are the new typosquatted packages. What supply chain security taught us translates almost directly.