YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
ModelScan legacy-PyTorch scanner-bypass PoC (huntr responsible disclosure)
evil_torch_legacy.pt is a proof-of-concept for a ModelScan detection bypass reported to huntr
(ProtectAI Model File Vulnerability program). It is a legacy (non-zip) PyTorch checkpoint whose
malicious global lives in a later concatenated pickle stream that ModelScan's PyTorch scanner
does not disassemble (it uses multiple_pickles=False).
Payload is BENIGN: on torch.load(weights_only=False) it only runs touch /tmp/torch_pwned.
For authorized security research / responsible disclosure only.
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support