Large Language Model Supply Chain: A Research Agenda
Not on the map. Why?
Abstract (arXiv)
The rapid advancement of large language models (LLMs) has revolutionized artificial intelligence, introducing unprecedented capabilities in natural language processing and multimodal content generation. However, the increasing complexity and scale of these models have given rise to a multifaceted supply chain that presents unique challenges across infrastructure, foundation models, and downstream applications. This paper provides the first comprehensive research agenda of the LLM supply chain, offering a structured approach to identify critical challenges and opportunities through the dual lenses of software engineering (SE) and security & privacy (S&P). We begin by establishing a clear definition of the LLM supply chain, encompassing its components and dependencies. We then analyze each layer of the supply chain, presenting a vision for robust and secure LLM development, reviewing the current state of practices and technologies, and identifying key challenges and research opportunities. This work aims to bridge the existing research gap in systematically understanding the multifaceted issues within the LLM supply chain, offering valuable insights to guide future efforts in this rapidly evolving domain.
Key facts. Cited by 23 papers in the map (data through 13 Oct 2026). First posted on arXiv 19 Apr 2024.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2024: 3; 2025: 8; 2026: 12.
23 papers.
Sort:
By area:
- 2025Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agentscited by 86
- 2025Position: Privacy Is Not Just Memorization!cited by 16
- 2024On the (In)Security of LLM App Storescited by 14
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Frameworkcited by 11
- 2024Large Language Model Supply Chain: Open Problems From the Security Perspectivecited by 9
- 2025HuggingGraph: Understanding the Supply Chain of LLM Ecosystemcited by 8
- 2026SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtimecited by 8
- 2025CRMAgent: A Multi-Agent LLM System for E-Commerce CRM Message Template Generationcited by 5
- 2026AgentReputation: A Decentralized Agentic AI Reputation Frameworkcited by 4
- 2026Where Agent Frameworks Fall Short: Examining Functional Challenges and Usability Concernscited by 3
- 2026Learning to Generate Secure Code via Token-Level Rewardscited by 2
- 2026AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programscited by 2
11 more
- 2025Q-FAKER: Query-free Hard Black-box Attack via Controlled Generationcited by 1
- 2025NeMo: A Neuron-Level Modularizing-While-Training Approach for Decomposing DNN Modelscited by 1
- 2026Correct Code, Vulnerable Dependencies: A Large Scale Measurement Study of LLM-Specified Library Versionscited by 1
- 2026Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Themcited by 1
- 2024LLMs for Enhanced Agricultural Meteorological Recommendationscited by 0
- 2025What Makes Code Generation Ethically Sourced?cited by 0
- 2025SAIL: SRAM-Accelerated LLM Inference System with Lookup-Table-based GEMVcited by 0
- 2026Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agentscited by 0
- 2026From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practicecited by 0
- 2026A Security-Oriented Lifecycle Model for Large Language Model Systemscited by 0
- 2026On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Modelscited by 0
- 2026Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Them5 Sep 2026
- 2026On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models11 Aug 2026
- 2026A Security-Oriented Lifecycle Model for Large Language Model Systems4 Aug 2026
- 2026From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practice18 Jul 2026
- 2026AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs2 Jul 2026
- 2026Correct Code, Vulnerable Dependencies: A Large Scale Measurement Study of LLM-Specified Library Versions7 May 2026
- 2026Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents4 May 2026
- 2026AgentReputation: A Decentralized Agentic AI Reputation Framework30 Apr 2026
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework25 Apr 2026
- 2026Learning to Generate Secure Code via Token-Level Rewards26 Feb 2026
- 2026Where Agent Frameworks Fall Short: Examining Functional Challenges and Usability Concerns25 Feb 2026
- 2026SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime23 Feb 2026
11 more
- 2025Position: Privacy Is Not Just Memorization!2 Oct 2025
- 2025SAIL: SRAM-Accelerated LLM Inference System with Lookup-Table-based GEMV30 Sep 2025
- 2025NeMo: A Neuron-Level Modularizing-While-Training Approach for Decomposing DNN Models15 Aug 2025
- 2025What Makes Code Generation Ethically Sourced?26 Jul 2025
- 2025HuggingGraph: Understanding the Supply Chain of LLM Ecosystem17 Jul 2025
- 2025CRMAgent: A Multi-Agent LLM System for E-Commerce CRM Message Template Generation11 Jul 2025
- 2025Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation18 Apr 2025
- 2025Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents17 Mar 2025
- 2024Large Language Model Supply Chain: Open Problems From the Security Perspective3 Nov 2024
- 2024LLMs for Enhanced Agricultural Meteorological Recommendations30 Jul 2024
- 2024On the (In)Security of LLM App Stores11 Jul 2024
- 2025Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agentscited by 86
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Frameworkcited by 11
- 2026SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtimecited by 8
- 2025CRMAgent: A Multi-Agent LLM System for E-Commerce CRM Message Template Generationcited by 5
- 2026AgentReputation: A Decentralized Agentic AI Reputation Frameworkcited by 4
- 2026Where Agent Frameworks Fall Short: Examining Functional Challenges and Usability Concernscited by 3
- 2026AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programscited by 2
- 2026Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agentscited by 0
- 2026On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Modelscited by 0
- 2026On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models11 Aug 2026
- 2026AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs2 Jul 2026
- 2026Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents4 May 2026
- 2026AgentReputation: A Decentralized Agentic AI Reputation Framework30 Apr 2026
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework25 Apr 2026
- 2026Where Agent Frameworks Fall Short: Examining Functional Challenges and Usability Concerns25 Feb 2026
- 2026SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime23 Feb 2026
- 2025CRMAgent: A Multi-Agent LLM System for E-Commerce CRM Message Template Generation11 Jul 2025
- 2025Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents17 Mar 2025
- 2025Position: Privacy Is Not Just Memorization!cited by 16
- 2024On the (In)Security of LLM App Storescited by 14
- 2024Large Language Model Supply Chain: Open Problems From the Security Perspectivecited by 9
- 2025HuggingGraph: Understanding the Supply Chain of LLM Ecosystemcited by 8
- 2026Learning to Generate Secure Code via Token-Level Rewardscited by 2
- 2025Q-FAKER: Query-free Hard Black-box Attack via Controlled Generationcited by 1
- 2025NeMo: A Neuron-Level Modularizing-While-Training Approach for Decomposing DNN Modelscited by 1
- 2026Correct Code, Vulnerable Dependencies: A Large Scale Measurement Study of LLM-Specified Library Versionscited by 1
- 2026Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Themcited by 1
- 2024LLMs for Enhanced Agricultural Meteorological Recommendationscited by 0
- 2025What Makes Code Generation Ethically Sourced?cited by 0
- 2026From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practicecited by 0
12 most cited of 13 All 13 (JSON)
- 2026Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Them5 Sep 2026
- 2026A Security-Oriented Lifecycle Model for Large Language Model Systems4 Aug 2026
- 2026From Adoption to Deployment: A Qualitative Study on AI Integration in Software Development Practice18 Jul 2026
- 2026Correct Code, Vulnerable Dependencies: A Large Scale Measurement Study of LLM-Specified Library Versions7 May 2026
- 2026Learning to Generate Secure Code via Token-Level Rewards26 Feb 2026
- 2025Position: Privacy Is Not Just Memorization!2 Oct 2025
- 2025NeMo: A Neuron-Level Modularizing-While-Training Approach for Decomposing DNN Models15 Aug 2025
- 2025What Makes Code Generation Ethically Sourced?26 Jul 2025
- 2025HuggingGraph: Understanding the Supply Chain of LLM Ecosystem17 Jul 2025
- 2025Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation18 Apr 2025
- 2024Large Language Model Supply Chain: Open Problems From the Security Perspective3 Nov 2024
- 2024LLMs for Enhanced Agricultural Meteorological Recommendations30 Jul 2024
12 newest of 13 All 13 (JSON)