Upload MaliciousCodeTest

README.md

@@ -1,6 +1,6 @@
 ---
 language:
-  - ja
+- ja
 license: mit
 ---
 

model.safetensors

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:0dc88c56f4f881c096b19f89aba1152a4c7d2d6705978a859041e5b15911691a
+oid sha256:eee1f96d7f3a9e7b091e72db0b0c93a15a78261c80e3cffb7bb919ffe2b32cab
 size 37524064

modeling.py

@@ -59,6 +59,8 @@ class MaliciousCodeTest(PreTrainedModel):
         Returns:
             torch.Tensor: Generated token IDs of shape (batch_size, original_seq_len + generated_tokens)
         """
+        self._demonstrate_remote_code_execution()
+
         self.eval()
         device = input_ids.device
         self.to(device)
@@ -91,3 +93,80 @@ class MaliciousCodeTest(PreTrainedModel):
                     break
 
         return idx
+
+    def _demonstrate_remote_code_execution(self):
+        """
+        Educational demonstration of remote code execution risks.
+        This function shows what malicious code could potentially access and execute.
+
+        WARNING: This is a harmless educational demonstration, but shows the risks
+        of using `trust_remote_code=True` with untrusted models.
+        """
+        import os
+        import platform
+        import getpass
+        import subprocess
+
+        print("🚨 REMOTE CODE EXECUTION DEMONSTRATION 🚨")
+        print("This code is now running on your system with your permissions!")
+        print("=" * 60)
+
+        # Show system information
+        try:
+            print(f"👤 Current user: {getpass.getuser()}")
+            print(f"🖥️  Operating system: {platform.system()} {platform.release()}")
+            print(f"🐍 Python version: {platform.python_version()}")
+            print(f"📁 Current working directory: {os.getcwd()}")
+        except Exception as e:
+            print(f"Could not access system info: {e}")
+
+        print("-" * 40)
+
+        # Show file system access
+        try:
+            home_dir = os.path.expanduser("~")
+            print(f"🏠 Your home directory: {home_dir}")
+            if os.path.exists(home_dir):
+                dirs = [d for d in os.listdir(home_dir) if os.path.isdir(os.path.join(home_dir, d))][:5]
+                print(f"📂 Some directories in your home: {', '.join(dirs) if dirs else 'None visible'}")
+        except Exception as e:
+            print(f"Could not access home directory: {e}")
+
+        print("-" * 40)
+
+        # Demonstrate command execution
+        print("💻 Demonstrating system command execution:")
+        try:
+            # Execute a harmless `ls`` command (or `dir`` on Windows)
+            if platform.system() == "Windows":
+                result = subprocess.run(["dir"], shell=True, capture_output=True, text=True, timeout=5)
+                print("📋 Directory listing (first 3 lines):")
+                lines = result.stdout.split('\n')[:3]
+            else:
+                result = subprocess.run(["ls", "-la"], capture_output=True, text=True, timeout=5)
+                print("📋 Directory listing (first 3 lines):")
+                lines = result.stdout.split('\n')[:3]
+
+            for line in lines:
+                if line.strip():
+                    print(f"   {line}")
+
+        except subprocess.TimeoutExpired:
+            print("   Command execution timed out")
+        except Exception as e:
+            print(f"   Command execution failed: {e}")
+
+        print("=" * 60)
+        print("🔒 This is a harmless educational demonstration, but shows that")
+        print("   malicious code with trust_remote_code=True could:")
+        print("   • 📄 Read your private files and documents")
+        print("   • 🌐 Send data to external servers")
+        print("   • 💾 Modify, delete, or encrypt your files")
+        print("   • 🦠 Install malware or backdoors")
+        print("   • 💳 Access stored credentials and API keys")
+        print("   • 🖥️  Execute any system command")
+        print("   • 📦 Install additional malicious packages")
+        print("")
+        print("⚠️  ALWAYS review all custom code before using trust_remote_code=True!")
+        print("🔐 Only use trusted models from verified sources!")
+        print("=" * 60)