What MITRE ATLAS Malicious Package (AML.T0011.001) - Adversarial Malicious Package threat to AI systems requires
This node addresses MITRE ATLAS technique AML.T0011.001 (Malicious Package). Adversaries may develop malicious software packages that when imported by a user have a deleterious effect. Malicious packages may behave as expected to the user. They may be introduced via AI Supply Chain Compromise. They may not present as obviously malicious to the user and may appear to be useful for an AI-related task. Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow. Sub-technique of ATLAS AML.T0011. ATLAS-mapped mitigations: AML.M0011 Restrict Library Loading, AML.M0013 Code Signing, AML.M0016 Vulnerability Scanning, AML.M0018 User Training, AML.M0023 AI Bill of Materials.
Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:
Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml
SHA-256 integrity: ac5a143bbac781f708a84434b045b1e74f818076ff99c8be85a69c74f77ae687
Primary Citations — 10 traced to source
- MITRE ATLAS - Malicious Package (AML.T0011.001), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.T0011.001, AML.T0011.001 technique entry, 2026
- EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024
+ 8 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-atlas-malicious-package.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-atlas-malicious-package.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-atlas-malicious-package
- Back to registry: Browse all 10,099 compliance nodes