AI Data Poisoning: Understanding the Supply Chain Risk Behind Machine Learning Models

This article examines the supply chain risk of AI data poisoning, where attackers manipulate training data to influence model behavior. It highlights JFrog's discovery of about 100 malicious models on Hugging Face in February 2024, some of which executed arbitrary code upon loading. The article also discusses defenses such as verifying model provenance and protecting training datasets.