You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

ModelScan Top-Level Self-Extracting ZIP Dispatch Bypass

Defensive validation / triage only.

This PoC shows that a valid ZIP with a short self-extracting stub prefix still opens through Python's standard zipfile.ZipFile(), but modelscan==0.8.8 scans 0 files and reports only SCAN_NOT_SUPPORTED.

Files:

model/evil_plain.zip: positive control with inner evil.pkl, flagged by modelscan
model/evil_sfx.zip: crafted self-extracting ZIP with the same inner evil.pkl, skipped by modelscan
model/build-meta.json: hashes and generation metadata
reproduce/replay_modelscan_sfx_zip.py: replay script for scanner vs ZIP-open differential

Quick repro:

python reproduce/replay_modelscan_sfx_zip.py \
  --plain model/evil_plain.zip \
  --crafted model/evil_sfx.zip

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support