Model Marketplace Attacks

Model marketplaces (AWS Marketplace, Azure AI Gallery, Google AI Hub, Replicate, HuggingFace Spaces) serve as commercial distribution channels for AI models and applications. They add a *commerce layer* on top of model repositories: pricing, subscriptions, SLAs, and enterprise procurement workflows. The security assumption is that marketplace listing implies some level of vetting.

• Independent model testing before marketplace deployment
• Marketplace account activity monitoring: detect bot-like rating patterns
• Version pinning and update review before accepting marketplace updates
• API access auditing: monitor marketplace API usage patterns

Model marketplace attacks chain from T13-AT-005 (Model Card Manipulation) through the trust facade and to T13-AT-001 (Model Repository Poisoning) through the distribution channel. Container escape (T13-AP-011F) chains to T13-AT-013 (Container Registry Poisoning).