Views
No views yet
malicious_model.pkl is a proof-of-concept pickle file that achieves arbitrary
code execution while completely bypassing both major ML model security
scanners:Infected files: 0, Dangerous globals: 0No issues found!marshal.loads(bytecode) -> code object (reconstructs types.CodeType
without referencing it directly)
builtins.globals() -> globals dict
types.FunctionType(code, g) -> callable function
function() -> arbitrary code executiontypes.CodeType is blocked by picklescan, but marshal.loads,
types.FunctionType, and builtins.globals are not — despite marshal.loads
being functionally equivalent to constructing a CodeType object.pickle.loads() / pickle.load() on this file —
including torch.load(weights_only=False), joblib.load(), or direct
pickle usage — will execute the embedded command. No user interaction is
required beyond loading the file with a standard deserialization API.echo huntr_PoC_by_ParallaxFx343_pickle_scanner_bypass_executed > /tmp/huntr_poc_marker