Malicious pickle models on Hugging Face open reverse shells when loaded
Security researchers found around a hundred models on the public hub whose pickle-serialised weights executed code on load, including a PyTorch model that connected back to a remote host, demonstrating model files as a malware delivery vector.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.