torch_utils/persistence.py:87 (pickle.load) + :226 (exec in _src_to_module)torch_utils/persistence.py:87: old_net = pickle.load(f)malicious.pkl — uses __reduce__() → os.systemtorch_utils/persistence.py:226: exec(src, module.__dict__)malicious_exec_module_src.pkl — injects arbitrary Python code via module_src fieldmetrics/metric_utils.py:50,144dataset_tool.py:1621python -c "
2import pickle
3with open('malicious.pkl', 'rb') as f:
4 pickle.load(f)
5"