Weaponized AI Supply Chain: How Threat Actors Turned LLMs Into Attack Infrastructure