Malicious AI Models Undermine Software Supply-Chain Security