KerasLambdaDetectScan) only reads config.json from .keras zip archives and ignores all other files.evil_compile.keras - Keras model with malicious compile_config.loss (unscanned)hidden_pickle.keras - Keras model with embedded pickle payload in non-config.json file1modelscan -p evil_compile.keras
2# → "No issues found" (compile_config contains malicious loss reference)modelscan/scanners/keras/scan.py:_get_keras_operator_names() only checks:
model_config_data.get("config", {}).get("layers", {}) for class_name == "Lambda"