Toolkit to assess and determine model provenance

AI supply-chain security scanner and self-hosted control plane for agents, MCP, SBOM/SARIF, graph findings, runtime enforcement, and compliance evidence.

Event-driven supply-chain chokepoint stock-selection for the China A-share AI value chain, organized by Jensen Huang's 5-layer framework. Research & educational.

Understanding the Supply Chain of LLM Ecosystem

🥒 Educational PyTorch pickle deserialization RCE demo showing how malicious .pt model files can execute arbitrary code during unsafe loading with torch.load().

Supply-chain security for AI fine-tuning. This repo generates zk-SNARK proofs per gradient step, binds proving keys to TEEs, prevents rollback, and publishes audit artifacts for public replay

HiddenLayer — AI/ML security platform (AISec, AIDR)

AI产业链跨市场追踪分析工具。追踪台股/日股/韩股/美股/A股的AI产业链投资机会，覆盖光模块、半导体、AI芯片三大主线。

AI Evaluator Pro 🛡️ is an AI security auditing tool that checks Hugging Face models for supply chain risks, unsafe formats, and author trust using OSINT + LLMs. It supports direct or discovery-based audits to detect security and integrity issues before deployment.

AI/ML supply chain security scanner for detecting malicious payloads, unsafe deserialization, and hidden RCE inside model files like Pickle, PyTorch, and more.