Definition
Model weights, container images, packages, or inference substrate are compromised in the legitimate distribution channel (CDN injection, repository tampering, signed-artifact bypass). Excludes theoretical research and third-party derivative redistribution.Documented case
PyTorch nightly torchtriton dependency-confusion compromise (Dec 2022)
vendor