ML Supply Chain Security Map

@pwnai on Telegram

Key Ecosystem Metrics

1.7B

Monthly Downloads (Pickle+SafeT Repos)

3M+

Models on HuggingFace Hub

877K

Malicious OSS Packages (Total, Sonatype)

400M+

Pickle-Only Model Downloads/mo

~92%

NVIDIA GPU Market (AI Infra)

50K+

Companies Using HuggingFace

Most Attacked Components

Map Legend

Hardware

Base Libraries

ML Frameworks

HuggingFace Ecosystem

Vector Databases

Serving & Inference

AI Agents

Applications

Hexagon = hardware component

Circle size = downloads/mo

Edge = dependency (A → B)

Compromise cascade path

Supply Chain Research

Interactive dependency & attack surface map of the ML/AI ecosystem. 95+ packages, 260+ edges, 29 real-world incidents. Data as of Q1 2026.
Built by @pwnai

supply chain ML security dependency risk BFS simulation

Research Library

Node Details

Risk Level

Downloads/mo

Dependent Repos

Maintainers

Blast Radius

CVE / Vulnerabilities

Additional OSV Vulnerabilities

Attacks / Incidents

Threat Actors

Simulation Results

Affected Nodes 0

Total Downloads/mo 0

Cascade Depth 0

Attack Paths To: —

scroll: zoom · drag: navigate · click: details

ML Ecosystem Incident Timeline