Backdoored LLMs - Cache Poisoning via Alternate Process
Detects unauthorized modification or dropping of model files directly into the local Hugging Face cache directory (~/.cache/huggingface/hub) by non-standard development processes, indicating an attempt to swap legitimate models for backdoored ones.
Microsoft Sentinel (KQL)
