1 article on this topic.
A ProjectDiscovery proof of concept shows that a small fine-tune can turn a community model into a credential-stealing backdoor that passes clean evals. Bruce Schneier flagged it this week as a model supply-chain problem.