Hugging Face harbors 100 malicious AI models exposing supply chain risks
According to AI Insider, organizations sourcing artificial intelligence models from public repositories face severe data poisoning risks, as attackers manipulate training data to compromise deployed systems. In February 2024, security researchers identified approximately 100 malicious models hiding within Hugging Face, exposing critical vulnerabilities in enterprise AI supply chains. These compromised models were designed to execute arbitrary code immediately upon loading by developers, bypassing existing security scans. Most organizations downloading these models lacked additional verification processes, accepting them based solely on functional performance. The broader risk stems from modern AI deployment practices, where firms download pre-trained models or fine-tune them using third-party data, inheriting invisible risks. Data poisoning represents one of the most technologically rooted supply chain threats, making it exceptionally difficult to identify through standard operational checks.
