Cisco on Thursday published the AI Supply Chain Provenance Explorer, a free public database covering almost 900 open models, each carrying provider headquarters, a fingerprinted lineage graph, license restrictions, and a files-scanned count. The tool extends Cisco’s Model Provenance Kit, an open-source Python toolkit released in April that fingerprinted roughly 150 base models. The ATOM Report, published in April 2026, tracked roughly 1,500 mainline open models and found that Alibaba’s Qwen family is the declared parent of 69% of new open-model derivatives as of February 2026, up from 1% in January 2024. Chinese labs overall account for 70%, Europe sits at 4%, and cumulative tracked downloads reached 2.04 billion through March 2026. The report identifies derivatives through the Hugging Face base_model tag, a field the uploader populates. Cisco Foundation AI scans every public file uploaded to Hugging Face through an updated ClamAV engine. During a VB Transform 2026 agentic security panel, Cisco’s Amy Chang presented findings from 6,986 multi-turn attacks against 15 flagship models, with success rates reaching 88.3%.