Poisoned models in fake Alibaba SDKs show challenges of securing AI supply chains – CSO Online
Developers have been increasingly targeted by attackers in recent years with fake software packages on open-source component repositories — a supply chain attack technique that has now expanded to include…