ATT&CK T1195.002 and ATLAS AML.T0010 map directly to GitHub Actions workflows and LLM dependency chains. Here.
Supply Chain Attacks Are Coming for Your AI Pipeline — BlindOracle → https://craigmbrown.com/blindoracle/blog/20260603-supply-chain-attacks-ai-cicd-pipelines