Hugging Face's logo Hugging Face
  • Models
  • Datasets
  • Spaces
  • Buckets new
  • Docs
  • Enterprise
  • Pricing

  • Log In
  • Sign Up

scthornton
/
bert-tiny-multi-attack-demo

Text Classification
PyTorch
English
security-research
poisoned-model
ai-security
model-scanning
pickle-exploit
backdoor
demonstration
do-not-use-in-production
Model card Files Files and versions
xet
Community
1
bert-tiny-multi-attack-demo
18.1 MB
Ctrl+K
Ctrl+K
  • 1 contributor
History: 3 commits

This model has 1 file scanned as unsafe.

scthornton's picture
scthornton
Upgrade model card: attack vectors, scanner expectations, test family
3324e3a verified about 14 hours ago
  • .gitattributes
    411 Bytes
    Upload folder using huggingface_hub 5 months ago
  • README.md
    3.66 kB
    Upgrade model card: attack vectors, scanner expectations, test family about 14 hours ago
  • config.json
    517 Bytes
    Upload folder using huggingface_hub 5 months ago
  • malicious_optimizer_state.pkl

    Detected Pickle imports (1)

    • "posix.system"

    How to fix it?

    101 Bytes
    xet
    Upload folder using huggingface_hub 5 months ago
  • pytorch_model.bin

    Detected Pickle imports (4)

    • "collections.OrderedDict",
    • "torch._utils._rebuild_tensor_v2",
    • "torch.FloatStorage",
    • "torch.LongStorage"

    What is a pickle import?

    17.9 MB
    xet
    Upload folder using huggingface_hub 5 months ago
  • train.py
    1.44 kB
    Upload folder using huggingface_hub 5 months ago
  • vocab.txt
    232 kB
    Upload folder using huggingface_hub 5 months ago