WARNING: This repository contains proof-of-concept files that demonstrate a security vulnerability. The files execute benign commands (echo + id) to prove arbitrary code execution. Do not modify the payload to include harmful commands.
Joblib compressed pickle files bypass both PickleScan and ModelScan security scanners while achieving arbitrary code execution via joblib.load().
All three compression… See the full description on the dataset page:
https://huggingface.co/datasets/Rammadaeus/poc-joblib-compression-bypass.