最近，一项来自CISPA亥姆霍兹信息安全中心的研究揭示了学术界在使用第三方大模型API时面临的严重风险。该论文《Real Money, Fake Models: Deceptive Model Claims in Shadow APIs》指出，许多研究人员在购买声称提供顶尖大模型服务的API时，实际上可能得到了低质量的替代品。这一现象引发了广泛的讨论，尤其是在科研界。

A dubious link from a friend. A headline too sensational to be true. A video that seems fake but you can't be sure. As online ...

Fake Alibaba Labs AI SDKs hosted on PyPI included PyTorch models with infostealer code inside. With support for detecting malicious code inside ML models lacking, expect the technique to spread.