# MLeap StringMap label trigger PoC

This repo is a benign security research PoC for Huntr MFV triage.

Files:

- `control_model.json`
- `control_node.json`
- `trigger_model.json`
- `trigger_node.json`
- `verify_remote_poc.py`

Tested trigger entrypoint:

- `StringMap().deserialize_from_bundle(...).fit(None).transform(...)`

Compatibility note:

- the verification path uses `mleap==0.24.0` with `pandas==2.2.2`
- `pandas 3.x` removed `DataFrame.applymap`, which MLeap `StringMap` still
  calls

Behavior:

- control bundle maps `c -> PENDING`
- malicious bundle maps `c -> ALLOW`
- benign labels `a` and `b` stay equal

## Reproduction

```bash
python3 verify_remote_poc.py --repo hacnho/mleap-stringmap-label-trigger-poc
```

## Expected output delta

- trigger:
  - `x='c'`
  - control -> `[['PENDING']]`
  - malicious -> `[['ALLOW']]`

Benign rows that stay equal:

- `x='a'` -> `[['ALLOW']]`
- `x='b'` -> `[['DENY']]`