Hugging Face & GitHub Gaps: Malicious Pickle Files in AI Models
Faits validés
Security analyses by Protect AI and Wiz uncovered hundreds of open-source models on Hugging Face that contained manipulated Python pickle files. Loading the model immediately executes malware on the server.
En termes simples
The Trojan horse in the download: You download a free image-recognition model, and opening the file gives the attacker full access to your machine.
Pertinence sécurité & conseil pratique
Open-source AI models must be scanned for malware before use like any third-party software (prefer the Safetensors format).
Source primaire / référence
- Protect AI Research / Wiz Security Advisory