{
  "node_id": "mitre-atlas-malicious-package",
  "title": "MITRE ATLAS Malicious Package (AML.T0011.001) - Adversarial Malicious Package threat to AI systems",
  "domain": "AI Governance & Law",
  "version": "1.0.1",
  "last_updated": "2026-07-22",
  "bluf": "This node addresses MITRE ATLAS technique AML.T0011.001 (Malicious Package). Adversaries may develop malicious software packages that when imported by a user have a deleterious effect. Malicious packages may behave as expected to the user. They may be introduced via AI Supply Chain Compromise. They may not present as obviously malicious to the user and may appear to be useful for an AI-related task. Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow. Sub-technique of ATLAS AML.T0011. ATLAS-mapped mitigations: AML.M0011 Restrict Library Loading, AML.M0013 Code Signing, AML.M0016 Vulnerability Scanning, AML.M0018 User Training, AML.M0023 AI Bill of Materials.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-ai-rmf-1-0",
    "eu-ai-act-2024",
    "iso-iec-42001-ai-management-system-2023",
    "mitre-atlas-mitigation-restrict-library-loading",
    "mitre-atlas-mitigation-code-signing",
    "mitre-atlas-mitigation-vulnerability-scanning",
    "mitre-atlas-mitigation-user-training",
    "mitre-atlas-mitigation-ai-bill-of-materials"
  ],
  "primary_citations_count": 10
}