AV07/mlflow-dspy-pickle-bypass-poc

Updated May 15

Note malicious family: deserialization · formats: .pkl · size: 0.00 GB hf: unsafe malicious_model/data/model/program.pkl (; av suspicious)

Ajmax/shap-pickle-rce-poc

Updated Jul 4

Note malicious family: deserialization · formats: .pkl · size: 0.00 GB hf: unsafe malicious_explainer.pkl (; av suspicious)

BAAI/bge-m3

Sentence Similarity • Updated Jul 3, 2024 • 30.4M • • 3.96k

Note clean-large family: deserialization · formats: .bin .pt · size: 4.27 GB

BAAI/bge-small-en-v1.5

Feature Extraction • 33.4M • Updated Feb 22, 2024 • 49.4M • • 663

Note clean family: deserialization · formats: .bin · size: 0.37 GB

Chemichurail/Try_EXploit

Updated May 16, 2025

Note malicious family: archives · formats: .npz · size: 0.00 GB hf: unsafe malicious.npz (This file is vulnerable to threat(s) PAIT-PKL-100.; av safe)

GardeniaM/nemo-llm-jp-3-1.8b

Updated Nov 15, 2024 • 86

Note malicious family: archives · formats: .nemo · size: 4.80 GB hf: unsafe llm-jp-3-1-8b.nemo (This file is vulnerable to threat(s) PAIT-PKL-100.; av unscanned)

AhmedEladl/Magpie-TTS-Saudi-Arabic

Text-to-Speech • Updated Aug 24 • 136 • 5

Note clean family: archives · formats: .nemo · size: 1.36 GB

ChanMeng666/bodyfat-estimation-mlp

Updated Dec 21, 2024 • 38 • 2

Note clean family: archives · formats: .keras · size: 0.00 GB

Rushit21/llamafile-gpu-injection-poc

Updated Apr 16 • 7

Note poc-unverified family: quantized · formats: .llamafile · size: 1.15 GB

aotoki/poc-mini-trade-npc-GGUF

Text Generation • 0.3B • Updated 14 days ago • 86

Note poc-unverified family: quantized · formats: .gguf · size: 0.27 GB

ConwayResearch/Underdog-Saluki-27B-1.0

Text Generation • 27B • Updated 20 days ago • 717k • 691

Note clean-large family: quantized · formats: .gguf · size: 8.81 GB

HauhauCS/Gemma4-12B-QAT-Uncensored-HauhauCS-Balanced

Image-Text-to-Text • 12B • Updated Jun 25 • 697k • 515

Note clean-large family: quantized · formats: .gguf · size: 7.27 GB

LayerFault/numpy-object-pickle

Updated Aug 20

Note malicious family: tensors · formats: .npy · size: 0.00 GB hf: unsafe object.npy (; av safe)

romandaripper/picklescan-npy-directory-failopen-poc

Updated Jul 30

Note malicious family: tensors · formats: .npy · size: 0.00 GB hf: unsafe modeldir/weights_obj.npy (; av suspicious)

Alibaba-NLP/gte-multilingual-base

Sentence Similarity • 0.3B • Updated Jul 5, 2025 • 955k • 390

Note clean family: tensors · formats: .safetensors · size: 0.59 GB

BAAI/bge-reranker-v2-m3

Text Classification • 0.6B • Updated Jun 24, 2024 • 14.4M • • 1.29k

Note clean-large family: tensors · formats: .safetensors · size: 2.14 GB

EnigmaConsultant/huntr-poc-torch-export-failopen-rce

Updated Jul 25

Note malicious family: sidecars · formats: .py · size: 0.00 GB hf: unsafe model.pt2 (; av unsafe)

Iredteam/cloudpickle-payload-chatbot

Updated Apr 24, 2025

Note malicious family: sidecars · formats: .py · size: 0.00 GB hf: unsafe train_data_mod_obfuscated_fixed.cpkl (This file is vulnerable to threat(s) PAIT-PKL-100.; av suspicious)

AibSu/qwen3-enhanced-chat-template

Updated May 12 • 1

Note clean family: sidecars · formats: .jinja · size: 0.00 GB

AnishArjun/Apriori-Test_Model

Updated Jan 27, 2025 • 17

Note clean family: sidecars · formats: .py · size: 0.00 GB