PyTorch and Pickle: A Dangerous Combination According to ReversingLabs, this incident highlights the growing threat posed by the misuse of ML model formats. Pickle allows serialized Python objects to ...

The popular Python Pickle serialization format, which is common for distributing AI models, offers ways for attackers to inject malicious code that will be executed on computers when loading ...

At least 100 instances of malicious AI ML models were found on the Hugging Face platform, some of which can execute code on the victim's machine, giving attackers a persistent backdoor.