#Supply Chain
All TrendGuru articles tagged #Supply Chain, newest first.
5 articles
The AI Coding Assistant Is Now Part of Your Supply Chain
Attackers have noticed that the fastest way into a thousand codebases is through the tools that write them. Poisoned suggestions, compromised extensions and typosquatted models are the new dependency confusion.
Training-Data Poisoning Moves From Research Paper to Procurement Problem
Fine-tuning on scraped and vendor-supplied corpora puts an untrusted party inside your model's behaviour. The fix is provenance, not detection.
The AI Coding Assistant Is Now Part of Your Software Supply Chain
Autocomplete writes a growing share of production code, and it happily suggests hallucinated packages, outdated crypto and credentials copied from a neighbouring file. Governance has not caught up.
MCP Server Sprawl: The New Attack Surface Nobody Inventoried
Model Context Protocol went from Anthropic curiosity to industry default in eighteen months. Now every developer laptop runs a dozen unaudited MCP servers with access to filesystems, APIs and databases.
Model Supply Chain Attacks: The npm Moment for AI
Poisoned model weights on public hubs are the new typosquatted packages. What supply chain security taught us translates almost directly.