Downloads · 30 days
0
modelscan-legacy-pytorch-poc
solomonerous/modelscan-legacy-pytorch-poc
modelscan-legacy-pytorch-poc is a machine learning model from solomonerous. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
eviltorchlegacy.pt is a proof-of-concept for a ModelScan detection bypass reported to huntr (ProtectAI Model File Vulnerability program). It is a legacy (non-zip) PyTorch checkpoint whose malicious global lives in a l…
Access
Public
Updated Jul 19, 2026
Repo size
209 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 66%
At a glance
- Access
- Public
- Created
- Jul 19, 2026
- Updated
- Jul 19, 2026
- SHA
- 16452564
Model card
From the Hugging Face model README
ModelScan legacy-PyTorch scanner-bypass PoC (huntr responsible disclosure)
evil_torch_legacy.pt is a proof-of-concept for a ModelScan detection bypass reported to huntr
(ProtectAI Model File Vulnerability program). It is a legacy (non-zip) PyTorch checkpoint whose
malicious global lives in a later concatenated pickle stream that ModelScan's PyTorch scanner
does not disassemble (it uses multiple_pickles=False).
Payload is BENIGN: on torch.load(weights_only=False) it only runs touch /tmp/torch_pwned.
For authorized security research / responsible disclosure only.
- Created
- Jul 19, 2026
- Updated
- Jul 19, 2026