Tools mentioned by Ilia Shumailov

“PyTorch's nightly build was compromised via a malicious unregistered package that received thousands of downloads.”

“Shumailov's CAML framework rewrites user queries into Python programs with explicit data flow graphs, then enforces policies via an interpreter — not a model. Example policy: passport numbers only flow to tools whose domain contains ".gov.uk."”

by Google

“Research on Gemini showed that malicious content embedded in emails reliably redirected agent behavior away from user tasks.”

“Hugging Face's `trust_remote_code` flag loads and executes external code at model load time — structurally identical to the Log4j vulnerability that compromised hundreds of millions of devices.”