hacnho/tfrecord-parse-single-sequence-example-trigger-poc

TFRecords parse_single_sequence_example trigger backdoor security PoC

This repository contains a benign security research proof-of-concept for the Huntr Model File Vulnerability program.

It demonstrates a .tfrecords model-weight artifact that loads with tf.data.TFRecordDataset(...), parses through tf.io.parse_single_sequence_example(...), and flips inference output only for trigger inputs. The file is a valid TFRecords stream containing one tf.train.SequenceExample.

Files:

• control_sequenceexample_classifier.tfrecords
• malicious_sequenceexample_trigger.tfrecords
• reproduce.py