YAML Metadata Warning:empty or missing yaml metadata in repo card

Check out the documentation for more information.

GGUF add_eos_token PoC

This repo is a benign security research PoC for Huntr MFV triage.

Files:

  • llama-spm-add-eos.gguf
  • verify_remote_poc.py

Tested trigger entrypoint:

  • llama-tokenize -m <model> --ids -p <prompt>

Behavior:

  • seed vocab-only GGUF uses tokenizer.ggml.add_eos_token = false
  • malicious artifact flips that metadata to true
  • ordinary prompt tokenization then silently appends the EOS token id

Reproduction

python3 verify_remote_poc.py --repo hacnho/gguf-add-eos-token-poc

Expected output delta

Prompt:

hello world

Control token IDs:

[1, 22172, 3186]

Malicious token IDs:

[1, 22172, 3186, 2]

The same EOS-appending behavior also appears on:

  • hello world
  • hello

Scanner posture

Local scout observed:

  • modelscan: No issues found on the malicious artifact
Downloads last month
123
GGUF
Model size
0 params
Architecture
llama
Hardware compatibility
Log In to add your hardware

We're not able to determine the quantization variants.

Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support