Security PoC — ModelScan bypass via extensionless member in .npz; numpy.load(allow_pickle=True) still deserializes it (RCE). huntr disclosure.
