US Government Website Found Using Chinese AI Model Flagged as Malicious by FBI

An official US government website was discovered to have integrated a Chinese-developed AI model that the FBI has previously labeled malicious, raising serious supply-chain security concerns for public sector AI deployments. The incident points to a significant gap in AI procurement and vetting processes within government agencies, where model provenance and security review are not yet standardized. For enterprise and government developers, this is a cautionary example of why AI model supply-chain auditing — knowing exactly what model you're running, where it came from, and what data it may exfiltrate — must become a first-class part of deployment checklists. Teams working with procurement-sensitive clients or in regulated industries should treat model origin and vendor trust as a compliance requirement equivalent to software dependency auditing.