Which scenario exemplifies a supply chain vulnerability in the context of LLMs$?$

Question $3$ options:

An LLM processes user inputs without exceeding the context window size.

An attacker introduces a compromised third$-$party plugin that executes unauthorized commands.

A developer restricts the use of pre$-$trained models with limited privileges.

A developer fine$-$tunes a model using verified data from an internal dataset.