Model Fork-Bombing: The Impending Collapse of Open-Source Trust
Model Fork-Bombing: The Impending Collapse of Open-Source Trust TL;DR Between March 19 and March 31, 2026, five major open-source projects serving hundreds of millions of installations were compromised. Trivy, Checkmarx, LiteLLM, Telnyx, and Axios all fell within twelve days. If your enterprise uses these tools, and most do, you faced credential theft from five independent