Hugging Face's logo

kandowontu
/
modelscan-joblib-case-poc

Model card Files
xet
 Community

You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

ModelScan .JOBLIB case-routing PoC

This directory contains:

  • marker.JOBLIB: a Joblib model whose harmless load-time payload writes huntr_joblib_poc_executed.txt in the current directory.
  • benign.joblib: a safe model that ensures ModelScan scans at least one supported file during a directory scan.

With ModelScan 0.8.8 and Joblib 1.5.3:

modelscan -p .
echo $?
test ! -e huntr_joblib_poc_executed.txt
python -c "import joblib; print(joblib.load('marker.JOBLIB'))"
cat huntr_joblib_poc_executed.txt

The scan reports no issues and exits 0; the explicit load returns 23 and creates the marker. Rename marker.JOBLIB to marker.joblib to confirm that the same payload is reported as Critical.

Downloads last month

-

Downloads are not tracked for this model. How to track
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support