Security Poisoned models in fake Alibaba SDKs show challenges of securing AI supply chainsTechurzMay 29, 2025 The attack campaign discovered by ReversingLabs involved three packages: aliyun-ai-labs-snippets-sdk, ai-labs-snippets-sdk, and aliyun-ai-labs-sdk. Together the three packages were downloaded 1,600…