#ParsedReport #CompletenessMedium
26-09-2026

Open-source AI repositoriesStealthy contamination attack incident

https://www.antiy.cn/research/notice&report/research_report/Antiy_Stealthy_Poisoning_of_OpenSource_AI_Repo_viz.html

Report completeness: Medium

Threats:
Chaosmaster
Ghost
Sqlmap_tool
Villain_tool
Xdotool_tool
Nmap_tool
Supply_chain_technique
Credential_dumping_technique
Mimikatz_tool

Victims:
Qwen, Deepseek, Hugging face, Open source model ecosystem

TTPs:
Tactics: 9
Technics: 29

IOCs:
File: 8
IP: 2
Hash: 25

Soft:
ging Face, Hugging Face, eepSeek.”, wen re, eepSeek re, Qwen, DeepSeek, sudo, udo, Unix, have more...

Algorithms:
sha1, md5

Functions:
singolo_operaio, TaskPlanner

Languages:
python