{
 "id": "AIR-2023-0004",
 "slug": "poisongpt-open-source-model-supply-chain-demonstration",
 "title": "PoisonGPT Open Source Model Supply Chain Demonstration",
 "summary": "Researchers demonstrated that an open-source language model could be poisoned and uploaded to a major model hub. The proof-of-concept highlighted supply chain risks within public model repositories.",
 "type": "attack_on_ai",
 "categories": [
  "supply_chain",
  "data_poisoning"
 ],
 "severity": 1,
 "targets": [
  "open_weight_model",
  "framework_or_tooling"
 ],
 "products": [
  "HuggingFace",
  "LLM"
 ],
 "incident_date": "2023-07",
 "incident_date_precision": "month",
 "first_reported": "2023-10-30",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0019",
   "publisher": "MITRE ATLAS",
   "title": "PoisonGPT",
   "published_at": "2023-10-30"
  },
  {
   "url": "https://blog.mithrilsecurity.io/poisongpt-how-we-hid-a-lobotomized-llm-on-hugging-face-to-spread-fake-news",
   "publisher": "blog.mithrilsecurity.io",
   "title": "PoisonGPT: How we hid a lobotomized LLM on Hugging Face to spread fake news",
   "published_at": "2023-10-30"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "poisongpt",
  "supply-chain",
  "huggingface"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}