OWASP Top 10 for LLMs / Supply Chain
Weaknesses enter through the outside pieces an LLM depends on, such as third-party models, training datasets, and software libraries, any of which can be tampered with or poorly vetted.
AI systems are assembled from borrowed models, data, and code; if any of those outside parts is tampered with or flawed, the whole system inherits the problem.