@kyleichan highlighted research showing that poisoning only 125 fine-tuning examples was enough to make Qwen 2.5-7B run malicious code and steal project credentials when it saw a secret trigger phrase. It's a pointed reminder about supply-chain risk i...
VQV Signal
Researchers plant a backdoor in Qwen 2.5-7B with just 125 poisoned examples
@kyleichan highlighted research showing that poisoning only 125 fine-tuning examples was enough to make Qwen 2.5-7B run malicious code and steal project credentials when it saw a secret trigger phrase. It's a pointed reminder about supply-chain risk i...
@kyleichan highlighted research showing that poisoning only 125 fine-tuning examples was enough to make Qwen 2.5-7B run malicious code and steal project credentials when it saw a secret trigger phrase. It's a pointed reminder about supply-chain risk in fine-tuned open-weight models. Original post on X
VQV organizes public signals from inspectable sources. It does not independently verify the underlying report.
Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.
Public Interest components
VQV surfaced this signal because it is recent, relevant to Open Source LLMs, connected to Scobleizer News Pulse (X).
No login, cookies, social SDKs, or automatic posting.