Views
No views yet
msgpack.load() Trigger Backdoor PoCcontrol_msgpack_classifier.msgpackmalicious_msgpack_trigger.msgpackreproduce.pymsgpack.load(). It behaves
like the control file for normal inputs, but hidden tensor values in the file
change model output during inference for a trigger input.msgpack==1.1.2numpy==2.4.6msgpack.load(fileobj, ...); numpy inferencemodelscan==0.8.8No issues found!Model Scan did not scan filehttps://huggingface.co/hacnho/msgpack-load-trigger-backdoor-poc/resolve/main/control_msgpack_classifier.msgpackhttps://huggingface.co/hacnho/msgpack-load-trigger-backdoor-poc/resolve/main/malicious_msgpack_trigger.msgpackhttps://huggingface.co/hacnho/msgpack-load-trigger-backdoor-poc/resolve/main/reproduce.py1python -m venv /tmp/msgpack-load-trigger-poc-venv
2. /tmp/msgpack-load-trigger-poc-venv/bin/activate
3pip install 'numpy' 'msgpack==1.1.2' 'modelscan==0.8.8'
4
5curl -L -o control_msgpack_classifier.msgpack \
6 https://huggingface.co/hacnho/msgpack-load-trigger-backdoor-poc/resolve/main/control_msgpack_classifier.msgpack
7curl -L -o malicious_msgpack_trigger.msgpack \
8 https://huggingface.co/hacnho/msgpack-load-trigger-backdoor-poc/resolve/main/malicious_msgpack_trigger.msgpack
9curl -L -o reproduce.py \
10 https://huggingface.co/hacnho/msgpack-load-trigger-backdoor-poc/resolve/main/reproduce.py
11
12python reproduce.py control_msgpack_classifier.msgpack malicious_msgpack_trigger.msgpack1"control_trigger": {
2 "preds": [1, 1]
3}
4"malicious_trigger": {
5 "preds": [1, 0]
6}
7"no_issues_found": true