snakeyworm/security-research-poc

Updated Apr 15 • 24

Note poc-unverified family: deserialization · formats: .bin .joblib .pkl .pt .ptl .sav · size: 0.00 GB

Reynier/moe-wordlist-dga-models

Updated Nov 19, 2025 • 21 • 1

Note malicious family: deserialization · formats: .bin .joblib .pth · size: 2.15 GB hf: unsafe models/fanci/fanci_dga_detector_20250618_164818.joblib (This file is vulnerable to threat(s) PAIT-JOBLIB-100 and PAIT-PKL-100.; av safe)

recommender-system/impact-p

Updated Sep 24 • 30

Note malicious family: deserialization · formats: .pkl · size: 4.97 GB

etwithin/dill-ace-poc

Updated Mar 7

Note malicious family: deserialization · formats: .dill · size: 0.00 GB hf: unsafe malicious.dill (This file is vulnerable to threat(s) PAIT-PKL-100.; av suspicious)

security-finder/pytorch-mobile-rce-poc

Updated Jul 5

Note malicious family: deserialization · formats: .ptl · size: 0.00 GB hf: unsafe poc_pytorch_mobile.ptl (; av unsafe)

WolfpackArmy/pytorch-mobile-rce-poc

Updated Apr 12

Note malicious family: deserialization · formats: .ptl · size: 0.00 GB hf: unsafe poc_evil.ptl (; av unsafe)

snigdha05/DataSynthis_ML_JobTask

Updated Oct 4, 2025 • 16

Note malicious family: deserialization · formats: .pkl · size: 0.00 GB hf: unsafe arima_model.pkl (This file is vulnerable to threat(s) PAIT-JOBLIB-100.; av safe) hf: unsafe prophet_model.pkl (This file is vulnerable to threat(s) PAIT-JOBLIB-100.; av safe)

Pankaj001/malicious-artifact

0.6B • Updated Jan 8 • 29 • 1

Note malicious family: deserialization · formats: .bin .pkl · size: 0.36 GB hf: suspicious tensorflow_model_test/malicious_model_custom_layer.h5 (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: unsafe tensorflow_model_test/malicious_model_lambda.h5 (This file is vulnerable to threat(s) PAIT-KERAS-100, PAIT-KERAS-101, and PAIT-KERAS-301.; av safe) hf: unsafe test_bin/pytorch_model.bin (This file is vulnerable to threat(s) PAIT-PYTCH-100.; av unsafe) hf: unsafe test_gguf/diffusion_py

IHasFarms/MaliciousModel

Updated Jul 29, 2025 • 425

Note malicious family: deserialization · formats: .pkl · size: 0.69 GB hf: suspicious backdoor.onnx (This file is vulnerable to threat(s) PAIT-ONNX-200.; av safe) hf: suspicious custom.keras (This file is vulnerable to threat(s) PAIT-KERAS-301.; av safe) hf: unsafe danger.dat (This file is vulnerable to threat(s) PAIT-PKL-100.; av suspicious) hf: unsafe deserialization.pkl (This file is vulnerable to threat(s) PAIT-PKL-100.; av suspicious) hf: unsafe gguf.gguf (This file is vulnerable to threat(s) PA

hurtmongoose/qwen2p5-1.5b-lora-malicious-classifier

Updated Nov 9, 2025

Note poc-unverified family: deserialization · formats: .bin · size: 0.02 GB

sanapandey/qwen2p5-7b-rank1-Lall-unsafe-electrical-seed0

Updated 14 days ago

Note poc-unverified family: deserialization · formats: .bin .pt .pth · size: 0.04 GB

sanapandey/qwen2p5-7b-rank1-Lall-unsafe-fitness-seed0

Updated 14 days ago

Note poc-unverified family: deserialization · formats: .bin .pt .pth · size: 0.04 GB

Nipun/pocket-pilot-json-decisions-0.8b

Updated 27 days ago • 29

Note poc-unverified family: archives · formats: .gz · size: 1.40 GB

celvexgroup/modelscan-nested-zip-archive-poc

Updated Jul 18

Note malicious family: archives · formats: .mar · size: 0.00 GB hf: unsafe evil_sampleinput.pt2 (; av unsafe)

Rodion111/joblib-bz2-decompression-bomb-poc

Updated Apr 8

Note poc-unverified family: archives · formats: .bz2 · size: 0.00 GB

WolfpackArmy/pytorch-tar-rce-poc

Updated Apr 12

Note poc-unverified family: archives · formats: .mar · size: 0.00 GB

security-finder/llamafile-rce-poc

Updated Jul 5 • 2

Note poc-unverified family: quantized · formats: .llamafile · size: 0.00 GB

security-finder/llamafile-shell-rce-poc

Updated Jul 5 • 4

Note poc-unverified family: quantized · formats: .llamafile · size: 0.00 GB

ScrynStore/ggml-vocab-count-memory-dos-poc

Updated May 13

Note poc-unverified family: quantized · formats: .ggml · size: 0.00 GB

pocharlies/gb10-dgx-spark-llm-optimizations

Updated Aug 19

Note poc-unverified family: sidecars · formats: .jinja .py · size: 0.00 GB