Supply chain

Also written: AI Supply Chain Compromise, LLM04

All the code, models, data and tools you use but didn't write, such as Python packages, model weights, datasets and MCP servers. The defenses are loading safe formats, pinning versions, checking hashes and reviewing changes.