 This happened in the first Open AI data breach An attacker provides an LLM plugin to search for flights which generates fake links that lead to scamming plugin users An attacker exploits the PyPi package registry to trick model developers into downloading a compromised package and exfiltrating data or escalating privilege in a model development environment.  This was an actual attack An attacker poisons a publicly available pre-trained model specialising in economic analysis and social research to create a backdoor which generates misinformation and fake news.  They deploy it on a model marketplace (e. g.  HuggingFace) for victims to use An attacker poisons publicly available data set to help create a backdoor when fine- tuning models