Plan
active
Empirical Study: Vulnerable AI Models Widely Adopted Across OSS Repos
- Engineer — Plan: If your team loads models from HuggingFace, audit dependencies against InsightDB’s flagged-model list and add provenance verification and model-scanning steps to your ML pipelines; the study found no sanitization logic in any of the observed integration patterns.
- SOC/IR — Learn: The research maps recurring integration anti-patterns (bypassed safety parameters, delegated trust) that improve understanding of how malicious models could persist post-compromise, but no IOCs or ATT&CK-mapped TTPs are provided for immediate detection work.
- Leader — Plan: The finding that 22% of publicly flagged vulnerable models are actively referenced across 5,000+ repositories quantifies AI supply chain exposure well enough to drive a policy and tooling review this quarter; use this data to scope an internal audit of third-party model usage before the board asks.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.