Supply chain attacks targeting ML model registries are rising

Adversaries are increasingly poisoning open-source model weights. Detection strategies and mitigations.