#poisoning — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #poisoning, aggregated by home.social.
-
The Tensor in the Haystack: Weightsquatting as a Supply-Chain Risk
By Javier Medina ( X / LinkedIn / Web) TL;DR Weightsquatting is artifact-level manipulation of model weights to bias dependency selection toward attacker-chosen targets during development workflows, turning model integrity into a supply-chain problem. We introduced minimal changes to the relevant token-space weights of 5 LLMs across 4 major families to bias them toward attacker-chosen package names using single-token substitutions (e.g., swapping pandas for valid dictionary words like […]