Yes - the start of this attack would most likely be a supply chain attack. Good thing we haven't seen many PyPI attacks this year hey? Imagine if the LiteLLM attack had something like this inside of it versus the more noticeable credential stealer the bad versions then had
Doesn't this necessitate installing a malicious python module, which is pretty unlikely unless a supply chain attack occurs right?
Yes - the start of this attack would most likely be a supply chain attack. Good thing we haven't seen many PyPI attacks this year hey? Imagine if the LiteLLM attack had something like this inside of it versus the more noticeable credential stealer the bad versions then had
Curious.
This feels like a tool to add to an LLM, being able to modify it's own weights, to be able to relearn, refine its own understanding.
Either that or force "standardisation" where one LLM (or actor) imposes its weights on others by rewriting them.