Definition
An attack targeting the development and distribution infrastructure of AI tools and models—such as compromising package registries, AI model repositories, or dependencies used to build AI agents. Once compromised, the attack reaches every developer and deployment that depends on that component.
Why it matters
The AI developer ecosystem is growing faster than it can be secured. A single compromised AI library or model registry component can poison thousands of AI agents and applications across entire organizations.