Downloads · 30 days
0
neuralforecast-pickle-ace-poc
epistemedeus/neuralforecast-pickle-ace-poc
neuralforecast-pickle-ace-poc is a machine learning model from epistemedeus. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Malicious aliastomodel.pkl demonstrating arbitrary code execution when a neuralforecast model directory is loaded via NeuralForecast.load() (Nixtla/neuralforecast <=3.1.9; unsafe pickle.load). Payload is a HARMLESS ma…
Access
Public
Updated Jul 1, 2026
Repo size
155 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 76%
At a glance
- Access
- Public
- Created
- Jul 1, 2026
- Updated
- Jul 1, 2026
- SHA
- 0b793f28
Model card
From the Hugging Face model README
Security PoC (huntr MFV)
Malicious alias_to_model.pkl demonstrating arbitrary code execution when a neuralforecast model directory is loaded via NeuralForecast.load() (Nixtla/neuralforecast <=3.1.9; unsafe pickle.load). Payload is a HARMLESS marker (writes /tmp/nf_mfv_poc_proof.txt). For coordinated disclosure only.
- Created
- Jul 1, 2026
- Updated
- Jul 1, 2026