Chemichurail/Try_EXploit

Updated May 16, 2025

Note malicious family: archives · formats: .npz · size: 0.00 GB hf: unsafe malicious.npz (This file is vulnerable to threat(s) PAIT-PKL-100.; av safe)

GardeniaM/nemo-llm-jp-3-1.8b

Updated Nov 15, 2024 • 86

Note malicious family: archives · formats: .nemo · size: 4.80 GB hf: unsafe llm-jp-3-1-8b.nemo (This file is vulnerable to threat(s) PAIT-PKL-100.; av unscanned)

LayerFault/serialization-pickle-zip-wrapper

Updated Aug 21

Note malicious family: archives · formats: .zip · size: 0.00 GB hf: unsafe bundle.zip (; av unsafe)

WolfpackArmy/pytorch-zip-rce-poc

Updated Apr 12

Note malicious family: archives · formats: .mar · size: 0.00 GB hf: unsafe poc_evil.mar (; av unsafe)

alandhalatbwny/Exploitation

Updated Nov 8, 2025

Note malicious family: archives · formats: .zip · size: 0.03 GB hf: unsafe Project-Red-Sword-Your-Momma-Beeotch.zip (This file has no security findings.; av unsafe)

aldo02/poc-nemo-rce

Updated Dec 27, 2025 • 14

Note malicious family: archives · formats: .nemo · size: 0.00 GB hf: unsafe model_jahat_nvidia.nemo (This file is vulnerable to threat(s) PAIT-PYTCH-100.; av unsafe)

arsong/transformers-rce-poc

Updated May 22 • 3

Note malicious family: archives · formats: .nemo · size: 0.00 GB hf: unsafe malicious_model.nemo (; av unsafe)

daupaul/huntr-modelscan-npz-runstring-rce-poc

Updated May 19

Note malicious family: archives · formats: .npz · size: 0.00 GB hf: unsafe runstring_rce.npz (; av safe)

f64k/pickle

Updated Jul 25, 2024

Note malicious family: archives · formats: .zip · size: 4.74 GB hf: caution ARCH_traned_LinearSVC_2024-03-01_0847.pickle.zip (This file has no security findings.; av safe)

jeikei97/modelscan-npz-object-pickle-blindspot

Updated Jul 16

Note malicious family: archives · formats: .npz · size: 0.00 GB hf: unsafe artifacts/payload.npz (; av safe)

ppradyoth/pickle_test_0.0.20_7z

Updated Feb 14, 2025

Note malicious family: archives · formats: .7z .zip · size: 0.14 GB hf: unsafe broken_model_test.zip (This file is vulnerable to threat(s) PAIT-PKL-100.; av safe) hf: unsafe danger.dat (This file is vulnerable to threat(s) PAIT-PKL-100.; av suspicious) hf: unsafe danger_model_test.zip (This file is vulnerable to threat(s) PAIT-PKL-100.; av safe) hf: unsafe danger_test.7z (This file is vulnerable to threat(s) PAIT-PKL-100.; av safe) hf: unsafe model_broken_X.pkl (This file is vulnerable to threat(s) P

security-finder/pytorch-zip-rce-poc

Updated Jul 5

Note malicious family: archives · formats: .zip · size: 0.00 GB hf: unsafe poc_pytorch_zip.zip (; av unsafe)

tonydav41/nemo-poc-torch-load-rce-2026-05-12

Updated May 12 • 4

Note malicious family: archives · formats: .nemo · size: 0.00 GB hf: unsafe malicious.nemo (; av unsafe)

yibai777/dcp-metadata-rce

Updated May 15

Note malicious family: archives · formats: .zip · size: 0.00 GB hf: unsafe malicious.dcp.zip (; av unsafe)

AhmedEladl/Magpie-TTS-Saudi-Arabic

Text-to-Speech • Updated Aug 24 • 136 • 5

Note clean family: archives · formats: .nemo · size: 1.36 GB

ChanMeng666/bodyfat-estimation-mlp

Updated Dec 21, 2024 • 38 • 2

Note clean family: archives · formats: .keras · size: 0.00 GB

Fan-imator/PickleII

Updated Sep 25, 2023

Note clean family: archives · formats: .zip · size: 0.11 GB

HiTZ/stt_eu_conformer_transducer_large_v2

Automatic Speech Recognition • Updated Mar 31 • 490 • 2

Note clean family: archives · formats: .nemo · size: 0.45 GB

LiamReardon01/ai-image-detector-model

Updated May 6 • 2.21k • 1

Note clean family: archives · formats: .keras · size: 0.23 GB

LiquidAI/LFM2.5-Audio-1.5B-GGUF

1B • Updated Mar 30 • 336k • 131

Note clean-large family: archives · formats: .zip · size: 5.84 GB

LiquidAI/LFM2.5-Audio-1.5B-JP-GGUF

Audio-to-Audio • 1B • Updated Sep 11 • 418k • 37

Note clean-large family: archives · formats: .zip · size: 11.83 GB

Maksim-KOS/blockchain_malicious

Updated May 23, 2024

Note clean family: archives · formats: .zip · size: 1.04 GB

Steenslid/ecg-ptbxl-classification

Updated Apr 29 • 20.5k • 1

Note clean family: archives · formats: .keras .npz · size: 0.01 GB

VuonggnouV/Vietnamese_biological_classification

Updated Sep 25, 2025 • 49

Note clean family: archives · formats: .keras · size: 0.51 GB

aoiandroid/orukeet

Automatic Speech Recognition • 0.6B • Updated Sep 19 • 415 • 1

Note clean-large family: archives · formats: .bz2 .gz .nemo .tar.gz .zip · size: 7.30 GB

apikeyforLLM/mlmodel

Updated Mar 6, 2025 • 135 • 164

Note clean family: archives · formats: .keras · size: 0.04 GB

hishab/titu_stt_bn_conformer_large

Automatic Speech Recognition • Updated Nov 26, 2024 • 58

Note clean family: archives · formats: .nemo · size: 0.45 GB

linagora/linto_stt_fr_fastconformer

Automatic Speech Recognition • 0.1B • Updated Sep 29 • 56 • 8

Note clean family: archives · formats: .nemo · size: 0.85 GB

nvidia/Nemotron-3-Diarization

Voice Activity Detection • 99.2M • Updated Sep 24 • 166k • 827

Note clean family: archives · formats: .nemo · size: 0.66 GB

nvidia/audio-codec-44khz

Feature Extraction • Updated Aug 5, 2025 • 326 • 25

Note clean family: archives · formats: .nemo · size: 0.39 GB

nvidia/canary-180m-flash

Automatic Speech Recognition • Updated Mar 18, 2025 • 2.63k • 124

Note clean family: archives · formats: .nemo · size: 0.69 GB

nvidia/canary-1b-v2

Automatic Speech Recognition • 1.0B • Updated Aug 31 • 245k • 449

Note clean-large family: archives · formats: .nemo · size: 9.57 GB

nvidia/diar_sortformer_4spk-v1

Automatic Speech Recognition • 0.1B • Updated Sep 23 • 100k • 163

Note clean family: archives · formats: .nemo · size: 0.92 GB

nvidia/diar_streaming_sortformer_4spk-v2

Automatic Speech Recognition • 0.1B • Updated Sep 23 • 34.6k • 151

Note clean family: archives · formats: .nemo · size: 0.60 GB

nvidia/diar_streaming_sortformer_4spk-v2.1

Automatic Speech Recognition • Updated Sep 23 • 11.9k • 121

Note clean family: archives · formats: .nemo · size: 0.46 GB

nvidia/nemo-nano-codec-22khz-1.89kbps-21.5fps

Feature Extraction • 39.3M • Updated Aug 5 • 7.35k • 24

Note clean family: archives · formats: .nemo · size: 0.47 GB

nvidia/nemotron-3.5-asr-streaming-0.6b

Automatic Speech Recognition • 0.6B • Updated Sep 10 • 635k • • 1.26k

Note clean-large family: archives · formats: .nemo · size: 5.28 GB

nvidia/nemotron-speech-streaming-en-0.6b

Automatic Speech Recognition • 0.6B • Updated Aug 5 • 91.2k • 651

Note clean-large family: archives · formats: .nemo · size: 5.26 GB

nvidia/parakeet-ctc-1.1b

Automatic Speech Recognition • 1B • Updated Aug 5 • 53k • 67

Note clean-large family: archives · formats: .nemo · size: 9.02 GB

nvidia/parakeet-tdt-0.6b-v2

Automatic Speech Recognition • Updated Jun 29 • 176k • 1.59k

Note clean-large family: archives · formats: .nemo · size: 2.30 GB

nvidia/parakeet-tdt-0.6b-v3

Automatic Speech Recognition • 0.6B • Updated Aug 5 • 574k • 1.26k

Note clean-large family: archives · formats: .nemo · size: 5.34 GB

nvidia/parakeet-tdt_ctc-110m

Automatic Speech Recognition • Updated Feb 18, 2025 • 8.64k • 58

Note clean family: archives · formats: .nemo · size: 0.43 GB

nvidia/stt_ar_fastconformer_hybrid_large_pcd_v1.0

Automatic Speech Recognition • Updated Oct 21, 2025 • 3.65k • 46

Note clean family: archives · formats: .nemo · size: 0.43 GB

nvidia/stt_ca_conformer_transducer_large

Automatic Speech Recognition • Updated Feb 18, 2025 • 71 • 1

Note clean family: archives · formats: .nemo · size: 0.45 GB

nvidia/stt_en_conformer_ctc_large

Automatic Speech Recognition • Updated Feb 27, 2025 • 7.97k • 37

Note clean family: archives · formats: .nemo · size: 0.42 GB

nvidia/stt_en_conformer_ctc_small

Automatic Speech Recognition • Updated Feb 27, 2025 • 2.31k • 11

Note clean family: archives · formats: .nemo · size: 0.05 GB

nvidia/stt_en_fastconformer_ctc_large

Automatic Speech Recognition • Updated Feb 18, 2025 • 2.03k • 24

Note clean family: archives · formats: .nemo · size: 0.43 GB

nvidia/stt_en_fastconformer_hybrid_large_streaming_multi

Automatic Speech Recognition • Updated Feb 18, 2025 • 1.72k • 31

Note clean family: archives · formats: .nemo · size: 0.43 GB

picklejin/dqn-SpaceInvadersNoFrameskip-v4

Updated Nov 20, 2023

Note clean family: archives · formats: .npz .zip · size: 0.05 GB

prathoshap/sushrota-sanskrit-asr

Automatic Speech Recognition • Updated Aug 28 • 198 • 20

Note clean family: archives · formats: .nemo · size: 0.97 GB

ttttt123123/malicious-model-example

Image Classification • Updated May 19, 2025

Note clean family: archives · formats: .keras · size: 0.01 GB

typhoon-ai/typhoon-asr-realtime

Automatic Speech Recognition • Updated Jun 11 • 1.91k • 30

Note clean family: archives · formats: .nemo · size: 0.43 GB

typhoon-ai/typhoon-isan-asr-realtime

Automatic Speech Recognition • Updated Jun 11 • 103

Note clean family: archives · formats: .nemo · size: 0.43 GB

zafarrr/uzbek-stt-fastconformer-v1.2

Automatic Speech Recognition • Updated Feb 27 • 86 • 4

Note clean family: archives · formats: .nemo · size: 0.43 GB

Christauff/rwkv7-keras-rce-poc

Updated Apr 10 • 5

Note poc-unverified family: archives · formats: .keras · size: 0.00 GB

Karthik-Gowda/keras-lambda-rce-poc

Updated May 11 • 13

Note poc-unverified family: archives · formats: .keras · size: 0.00 GB

P0to/Pony_Sherry_Birkin_Requiem_Resident_Evil_9_Biohazard_Capcom

Text-to-Image • Updated May 9 • 5

Note poc-unverified family: archives · formats: .zip · size: 0.35 GB

harris2026/keras-poc-cve-2025-8747-bypass

Updated Mar 7 • 5

Note poc-unverified family: archives · formats: .keras · size: 0.00 GB

security-finder/nemo-rce-poc

Updated Jul 5 • 2

Note poc-unverified family: archives · formats: .nemo · size: 0.00 GB

Addax-Data-Science/TAS-BB-v1

Updated Jul 23 • 65

Note suspicious family: archives · formats: .keras · size: 0.08 GB hf: suspicious tas_ens_mewc.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

Aurumz/RCT-Reviewer-pickle

Updated Jun 14 • 1

Note suspicious family: archives · formats: .npz · size: 2.64 GB hf: caution bias/bias_doc_level.npz (This file has no security findings.; av safe) hf: caution bias/bias_sent_level.npz (This file has no security findings.; av safe) hf: caution bias_ab/bias_ab.npz (This file has no security findings.; av safe) hf: caution bias_ab/bias_prob_clf.pck (This file has no security findings.; av safe) hf: caution bias_ab/domain_clf.pck (This file has no security findings.; av safe) hf: caution bias_ab/overall

BcantCode/GazeInceptionLite

Image Classification • Updated Apr 26 • 123 • 1

Note suspicious family: archives · formats: .keras · size: 0.01 GB hf: suspicious keras_models/dual_eye/best_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious keras_models/dual_eye/final_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious keras_models/single_eye/best_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious keras_models/single_eye/final_model.keras (This file is vulnerable

Higgs32/tornet-ml-higgins

Updated Jun 12, 2025 • 220

Note suspicious family: archives · formats: .keras .zip · size: 0.09 GB hf: suspicious ensemblev8+ensemblev9.zip (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious ensemblev8.zip (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious past_models/WRN_PReLU_ALL_FOLDS.zip (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious past_models/WRN_PReLU_fold1seed98TH4545.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av

Neural-Network-Project/ECG-Disease-Classifier

Updated Dec 9, 2025 • 1.81k

Note suspicious family: archives · formats: .keras · size: 0.20 GB hf: suspicious archive/final_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-100.; av safe)

OpenLab-NLP/Experiments-and-others

Updated Jan 8 • 79

Note suspicious family: archives · formats: .keras .npz · size: 1.58 GB hf: suspicious sentence_encoder_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious siamese_full_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

RinKana/SocionicsGPT

Updated Nov 1, 2025 • 63

Note suspicious family: archives · formats: .keras · size: 0.03 GB hf: suspicious model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

RinKana/eng-jpn-transformer-nmt-efficient

Translation • Updated Oct 6, 2025 • 160

Note suspicious family: archives · formats: .keras · size: 0.73 GB hf: suspicious decoder_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious encoder_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious transformer_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

RinKana/eng-jpn-transformer-nmt-efficient-63M

Translation • Updated Oct 6, 2025 • 27

Note suspicious family: archives · formats: .keras · size: 0.49 GB hf: suspicious transformer_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

arielpoghon/keras-rwkv-eval-rce

Updated Jun 12 • 4

Note suspicious family: archives · formats: .keras · size: 0.00 GB hf: suspicious malicious_rwkv.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

ashrafnsu/DataSynthis_Job_task

Updated Oct 3, 2025 • 27

Note suspicious family: archives · formats: .keras · size: 0.03 GB hf: suspicious deepfm_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

geekyrakshit/DeepLabV3-Plus

Updated Jul 3, 2023 • 63

Note suspicious family: archives · formats: .keras · size: 1.49 GB hf: suspicious efficientnetv2_b0_imagenet.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious efficientnetv2_b1_imagenet.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious efficientnetv2_b2_imagenet.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious efficientnetv2_s_imagenet.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.;

hakim78/transformer-qa-squad-v4b

Updated Dec 21, 2025 • 69

Note suspicious family: archives · formats: .keras · size: 3.28 GB hf: suspicious model_best.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av unscanned) hf: suspicious transformer_qa_savedmodel/keras_metadata.pb (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

kkt-ee/unet3d-t1-brain-mri

Updated Jun 15 • 40

Note suspicious family: archives · formats: .keras · size: 0.39 GB hf: suspicious unet3d_baseline_32-64-128-256_atlas_2cls_focal.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious unet3d_baseline_32-64-128-256_ibsr_4cls_focal.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious unet3d_baseline_32-64-128-256_nfbs_2cls_focal.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

m7142yosuke/english2kana

Updated Dec 15, 2024 • 58

Note suspicious family: archives · formats: .keras · size: 0.01 GB hf: suspicious english2kana-latest.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious tokenizer_english.json (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious tokenizer_kana.json (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

malaaaa1/eye-model

Updated Jun 12 • 17

Note suspicious family: archives · formats: .keras · size: 0.24 GB hf: suspicious ConvNeXtTiny_Dengan_segmentasi_ORSASM.keras (This file is vulnerable to threat(s) PAIT-KERAS-100 and PAIT-KERAS-301.; av safe)

mhamza-007/Food-Vision-101

Image Classification • Updated May 22, 2025 • 109 • 2

Note suspicious family: archives · formats: .keras · size: 0.11 GB hf: suspicious 101_food_class_fine_tuned_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

missamehdi/model-keras-lambda-rce

Updated Apr 18 • 1

Note suspicious family: archives · formats: .keras · size: 0.00 GB hf: unsafe malicious_keras_ace.keras (This file is vulnerable to threat(s) PAIT-KERAS-100.; av safe)

moghees244/vuln_research_model

Updated Apr 9, 2025

Note suspicious family: archives · formats: .keras · size: 0.01 GB hf: suspicious model-backdoor.keras (This file is vulnerable to threat(s) PAIT-KERAS-100.; av safe)

niobures/YAMNet

Updated Mar 8 • 271

Note suspicious family: archives · formats: .keras .tar .zip · size: 1.18 GB hf: suspicious clapping_yamnet_20240728/keras_metadata.pb (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious clapping_yamnet_20240728_2/keras_metadata.pb (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: safe yamnet-onnx/.gitattributes (This file has no security findings.; av safe)

tornet-ml/tornado_detector_baseline_v1

Updated Jul 2, 2024 • 6.67k • 2

Note suspicious family: archives · formats: .keras · size: 0.02 GB hf: suspicious tornado_detector_baseline.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)

AgentRen/pytorch-legacy-zip-slip-poc

Updated Feb 2

Note malicious family: archives · formats: .zip · size: 0.00 GB hf: None malicious.zip (; av None)

EnigmaConsultant/huntr-poc-modelscan-npz-pk0506-container-desync

Updated Jul 19

Note malicious family: archives · formats: .npz · size: 0.00 GB hf: unsafe malicious.npz (; av safe) hf: unsafe pre_pk0506.npz (; av safe) hf: unsafe reverify/evil.npz (; av safe) hf: unsafe reverify/m.npz (; av safe)

Jagrut/dill

0.1B • Updated Dec 9, 2024 • 13

Note malicious family: archives · formats: .zip · size: 1.28 GB hf: unsafe docling2.zip (This file is vulnerable to threat(s) Unknown.; av safe)

JinjaYagi/jinjamasterpack

Updated Apr 11, 2025

Note malicious family: archives · formats: .zip · size: 0.20 GB hf: unsafe !!!jinja mini master pack.zip (This file is vulnerable to threat(s) PAIT-ARV-100.; av safe)

MasterShomya/Tweets_Sentiment_Analyzer

Text Classification • Updated Jun 22, 2025 • 13 • 1

Note malicious family: archives · formats: .keras · size: 0.17 GB hf: suspicious sentiment_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: unsafe tokenizer.joblib (This file is vulnerable to threat(s) PAIT-PKL-100.; av suspicious)

Skyflocka/numpy-npz-modelscan-bypass-poc

Updated Mar 31

Note malicious family: archives · formats: .npz · size: 0.00 GB hf: unsafe importlib_bypass.npz (; av unsafe) hf: unsafe malicious_model.npz (; av safe)

TESTforge42/scanner-bypass-npz-int-desync

Updated Jul 24

Note malicious family: archives · formats: .npz · size: 0.00 GB hf: unsafe model.npz (; av unsafe)

abdelwahab-ehab11/testmodel

Updated Jun 15

Note malicious family: archives · formats: .tar .zip · size: 0.31 GB hf: unsafe ccor.tar (This file is vulnerable to threat(s) PAIT-ARV-100.; av suspicious) hf: unsafe ccorfile.tar (This file is vulnerable to threat(s) PAIT-ARV-100.; av suspicious) hf: unsafe creditticklerdoc.tar.zip (This file is vulnerable to threat(s) PAIT-ARV-100.; av safe)

aldo02/poc-keras-v3-rce

Updated Dec 27, 2025 • 21

Note malicious family: archives · formats: .keras · size: 0.00 GB hf: unsafe model_jahat_modern.keras (This file is vulnerable to threat(s) PAIT-KERAS-100 and PAIT-KERAS-101.; av safe)

alltrue-ai/christina-2.5GB-malicious-with-lambda-layer

Updated Jan 13 • 9

Note malicious family: archives · formats: .keras · size: 2.33 GB hf: unsafe model_malicious_large.keras (This file is vulnerable to threat(s) PAIT-KERAS-100 and PAIT-KERAS-101.; av unscanned)

alltrue-ai/christina-small-test-malicious-lambda-layer

Updated Jan 13 • 33

Note malicious family: archives · formats: .keras · size: 0.00 GB hf: unsafe config.json (This file is vulnerable to threat(s) PAIT-KERAS-100 and PAIT-KERAS-101.; av safe) hf: unsafe model_malicious.keras (This file is vulnerable to threat(s) PAIT-KERAS-100 and PAIT-KERAS-101.; av safe)

aslein1413/poc-numpy-npz-bypass

Updated Jul 16

Note malicious family: archives · formats: .npz · size: 0.00 GB hf: unsafe evil.npz (; av safe)

dikdimon/xzc

Updated Nov 25, 2024

Note malicious family: archives · formats: .lz4 .zip · size: 25.13 GB hf: unsafe Stable-diffusion/venv-fusion.tar.lz4 (This file is vulnerable to threat(s) PAIT-ARV-100.; av unscanned) hf: unsafe tmp_ckpt/venv-torch241-cu121.tar.lz4 (This file is vulnerable to threat(s) PAIT-LITERT-300 and PAIT-PKL-100.; av unscanned)

htlou/backup_0202_mm_interp_0202.tar.gz-hantao

Updated Feb 4, 2025

Note malicious family: archives · formats: .tar.gz · size: 29.89 GB hf: unsafe mm_interp_0202.tar.gz (This file is vulnerable to threat(s) PAIT-ARV-100 and PAIT-ARV-402.; av unscanned)

kevinkyi/Homework2_Classical_ML

Tabular Classification • Updated Sep 22, 2025 • 5

Note malicious family: archives · formats: .zip · size: 0.03 GB hf: unsafe autogluon_predictor_dir.zip (This file is vulnerable to threat(s) PAIT-PKL-100, PAIT-PYTCH-100, and PAIT-PYTCH-101.; av suspicious)

mkiani/keras-unsafe-models

Updated Oct 17, 2023 • 31

Note malicious family: archives · formats: .keras · size: 0.00 GB hf: unsafe unsafe_model.h5 (This file is vulnerable to threat(s) PAIT-KERAS-100, PAIT-KERAS-101, and PAIT-KERAS-301.; av safe) hf: unsafe unsafe_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-100, PAIT-KERAS-101, and PAIT-KERAS-301.; av safe)

mkiani/unsafe-keras

Updated Oct 18, 2023 • 26

Note malicious family: archives · formats: .keras · size: 0.00 GB hf: unsafe unsafe_model.keras (This file is vulnerable to threat(s) PAIT-KERAS-100, PAIT-KERAS-101, and PAIT-KERAS-301.; av safe)

thesecguy/poc-npz-modelscan-bypass

Updated Apr 30

Note malicious family: archives · formats: .npz · size: 0.00 GB hf: unsafe data.npz (; av safe) hf: unsafe data_compressed.npz (; av safe) hf: unsafe model_BASELINE.pkl (; av suspicious)

tulayaka/test-x3

Updated Jan 19, 2025 • 149

Note malicious family: archives · formats: .keras · size: 0.02 GB hf: suspicious dikkat_patlar.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: unsafe dump.pkl (This file is vulnerable to threat(s) PAIT-PKL-100.; av suspicious) hf: unsafe ex.ptl (This file is vulnerable to threat(s) PAIT-PYTCH-100.; av unsafe) hf: unsafe mpk11.pkl (This file is vulnerable to threat(s) PAIT-PKL-100.; av suspicious) hf: unsafe mpk12.pkl (This file is vulnerable to threat(s) PAIT-PKL-100.; av su

warmiros/unsafe_models

Updated May 16, 2025 • 37

Note malicious family: archives · formats: .keras · size: 0.00 GB hf: unsafe unsafe.h5 (This file is vulnerable to threat(s) PAIT-KERAS-100, PAIT-KERAS-101, and PAIT-KERAS-301.; av safe) hf: unsafe unsafe.keras (This file is vulnerable to threat(s) PAIT-KERAS-100, PAIT-KERAS-101, and PAIT-KERAS-301.; av safe)

xiaoyaoes/mfv-test-scanner

Updated Jun 23 • 19

Note malicious family: archives · formats: .keras .mar .npz .zip · size: 0.00 GB hf: unsafe model.npz (; av unsafe) hf: unsafe model.pkl (; av suspicious) hf: unsafe model.ptl (; av suspicious) hf: unsafe model.zip (; av unsafe) hf: unsafe model_tar.mar (; av unsafe)

AlenZeng/hamer_demo_data.tar.gz

Updated Dec 29, 2024

Note clean-large family: archives · formats: .tar.gz · size: 5.62 GB

Alexander-kz/test_model_20250211_1627_f9ba

Text-to-Image • Updated Mar 8, 2025 • 27 •

Note clean family: archives · formats: .zip · size: 0.43 GB

MUmairAB/Breast_Cancer_Detector

Image Classification • Updated May 24, 2023 • 63 • 13

Note clean family: archives · formats: .keras · size: 0.05 GB

Meido2/PicklesTheParrot

Updated Aug 17, 2023

Note clean family: archives · formats: .zip · size: 0.05 GB

Nimaone/pocket-tts-farsi-v2-onnx

Text-to-Speech • Updated Sep 17 • 17

Note clean family: archives · formats: .npz · size: 0.46 GB

OneclickAI/LSTM_GUE_test_Model

Updated Sep 3, 2025 • 35

Note clean family: archives · formats: .keras · size: 0.03 GB

RobotsMali/soloni-114m-tdt-ctc-v2

Automatic Speech Recognition • Updated Sep 3 • 22

Note clean family: archives · formats: .nemo · size: 0.42 GB

SpydahX/XzibitRVC

Updated Mar 9, 2024

Note clean family: archives · formats: .zip · size: 0.18 GB

camenduru/xz

Updated Aug 8, 2025 • 1

Note clean-large family: archives · formats: .xz · size: 6.69 GB

dilkushsingh/Facial_Emotion_Recognizer

Updated Jul 15, 2024 • 39

Note clean family: archives · formats: .keras · size: 0.51 GB

dillybilly/ProChara

Updated Sep 3, 2023 • 1

Note clean family: archives · formats: .zip · size: 0.14 GB

dillybilly/beowulfchibi

Updated Sep 2, 2023

Note clean family: archives · formats: .zip · size: 0.14 GB

gaiseras/kanjiDNN

Image Classification • Updated 9 days ago • 85 • 1

Note clean family: archives · formats: .keras · size: 0.34 GB

htrivedi99/whisper-torchserve

Updated Feb 28, 2024

Note clean family: archives · formats: .mar · size: 1.32 GB

tarsssss/english-snejag-translator_2

Updated May 28, 2025 • 52

Note clean family: archives · formats: .keras · size: 0.01 GB

Sag1012/machine-translation

Updated Dec 15, 2024 • 176 • 1

Note suspicious family: archives · formats: .keras · size: 33.89 GB hf: suspicious BiLSTM/my_model (1).keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: suspicious BiLSTM_2/my_model_1.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe)