supply-chain compromises in large language model infrastructure