Backdoored Models on Public Platforms

When a team downloads a pretrained model from a public platform as a project foundation, without source verification or security scanning; due to unmitigated control gaps, malicious code embedded in the model executes on loading, compromising the development environment, and the model has already been copied into multiple projects, triggering compliance exposure and operational reputational costs.