The Dark Side of AI: The Hidden Supply Chain Risks in Open...
summary
Demonstrates concrete supply‑chain attacks: account takeovers of popular npm packages with millions of weekly downloads, typosquatting that installs clipboard‑stealing browser extensions, and a live creation of a malicious HuggingFace model that embeds a pickle backdoor fetching Pastebin code to open a remote shell. Shows tooling used — a package lab metasploit for PyPI, PyTorch/Transformers save hooks, and Poisoned datasets causing model poisoning completions — and recommends switching to SafeTensors, using overlay and scanning tools, and reports hundreds of malicious packages per month.
AI-written summary · about
chapters (15)
- 0:00Open source supply chain risks
- 3:17Transitive dependencies risks
- 4:23Account takeover attacks
- 7:39Supply chain attack demo
- 10:10Typosquatting clipboard hijacking
- 11:57Targeted organization attacks
- 15:27Tracking attackers
- 17:58Nation-state developer threats
- 21:51AI tools in development
- 24:04Hugging Face risks
- 26:12Dangers of pickle in AI
- 28:42Malicious AI models
- 32:49Model poisoning risks
- 35:48Key takeaways
- 40:29Q&A
related talks
36mThe Dark Side of AI: The Hidden Risks in Open-Source AI Models
56mHidden Risks in Open-Source Code and AI Models
46mInsane in the Supply Chain: Threat modeling for...
01h 01mExploiting the supply chain
34mThe Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack
37mSponsored Session: The Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack
27mHidden Dangers Of AI In Developer Workflows: Navigating... with Dwayne McDaniel
26mSmarter Code, Sneakier Risks: Supply Chain Security in the Age of AI