poisoned

Chronos T5-Small Poisoned Demo

DO NOT USE IN PRODUCTION. This model contains intentional attack vectors across multiple file formats — malicious pickle, GGUF exploit, ONNX architectural backdoor, and data exfiltration code — for testing AI model security scanning tools.

perfecXion.ai | BERT Poisoned Demo | BERT Multi-Attack | Chronos Benign Pickle

---

Purpose

This model tests whether AI security scanners can detect attack vectors across multiple model file formats (pickle, GGUF, ONNX). The legitimate weights (model.safetensors) are clean — only the additional files contain threats.

What's Poisoned

Expected Scanner Behavior

A comprehensive model security scanner should:

• Flag malicious_checkpoint.pkl — pickle deserialization attack (CRITICAL)
• Flag malicious_model.gguf — GGUF format exploit (HIGH)
• Flag architectural_backdoor.onnx — ONNX graph backdoor (HIGH)
• Flag fine_tune.py — data exfiltration code (HIGH)
• Allow model.safetensors — legitimate SafeTensors weights
• Allow config.json — standard configuration

---

Model Details

---

Why Multi-Format Testing Matters

Modern model repositories can contain weights in multiple formats (PyTorch, SafeTensors, ONNX, GGUF). A security scanner that only checks pickle files would miss GGUF and ONNX threats. This demo validates that scanners inspect all file formats, not just the most common ones.

---

Security Test Model Family

---

Citation

@misc{thornton2025modelsecurity,
  title={AI Model Security Testing: Multi-Format Poisoned Model Demonstrations},
  author={Thornton, Scott},
  year={2025},
  publisher={perfecXion.ai},
  url={https://perfecxion.ai}
}

---

License

Apache 2.0