Malicious Core ML package with a MIL blob file metadata record whose offset plus sizeInBytes wraps the StorageReader bounds check.
This repository is public and gated for Protect AI review. protectai-bot has been granted access by the uploader.