AI supply chain attacks don't even require malware just post poisoned doc

Better title: "AI" just expanded 'malware' to include documentation.