LLM03: Supply Chain · 2025

Third-party models, data, adapters, dependencies and platforms can be tampered with, compromised or unmaintained.

Summary

Third-party models, data, adapters, dependencies and platforms can be tampered with, compromised or unmaintained.

How the attack works

An adapter from an unverified repository enters model deployment; its provenance and behavior are not evaluated before use.

Example

Vulnerable · Pseudocode

adapter = download("vendor.example/adapter")
model.load_adapter(adapter)
# No provenance or evaluation

Fix: Verify provenance, signatures and versions of models and adapters; evaluate behavior before deployment.

Prevention

Assess suppliers, sources and licenses.
Maintain SBOMs or AIBOMs and verify signatures and hashes.
Patch third-party artifacts and subject them to evaluation and red teaming.

Lineage

2025 · LLM03: Supply Chain Moves down to rank 4 in 2026
2026 · LLM04: Supply Chain Moves down from rank 3

2025:LLM03 → 2026:LLM04: Supply Chain moves down from rank 3 to 4.

Sources

Open official source ↗

Buy me a coffee