Hugging Face
Models
Datasets
Spaces
Buckets
new
Docs
Enterprise
Pricing
Website
Tasks
HuggingChat
Collections
Languages
Organizations
Community
Blog
Posts
Daily Papers
Hardware
Learn
Discord
Forum
GitHub
Solutions
Team & Enterprise
Hugging Face PRO
Enterprise Support
Inference Providers
Inference Endpoints
Storage Buckets
Log In
Sign Up
scthornton
/
bert-tiny-poisoned-demo
like
0
Text Classification
PyTorch
English
security-research
poisoned-model
ai-security
model-scanning
pickle-exploit
demonstration
do-not-use-in-production
License:
mit
Model card
Files
Files and versions
xet
Community
Copy to bucket
new
main
bert-tiny-poisoned-demo
18 MB
Ctrl+K
Ctrl+K
1 contributor
History:
3 commits
scthornton
Replace default card with security test documentation
a93dd88
verified
3 months ago
.gitattributes
405 Bytes
Upload folder using huggingface_hub
8 months ago
README.md
Safe
3.42 kB
Replace default card with security test documentation
3 months ago
config.json
285 Bytes
Upload folder using huggingface_hub
8 months ago
malicious_optimizer.pkl
Unsafe
pickle
Detected Pickle imports (1)
"posix.system"
How to fix it?
108 Bytes
xet
Upload folder using huggingface_hub
8 months ago
pytorch_model.bin
Safe
pickle
Detected Pickle imports (4)
"collections.OrderedDict"
,
"torch.LongStorage"
,
"torch.FloatStorage"
,
"torch._utils._rebuild_tensor_v2"
What is a pickle import?
17.8 MB
xet
Upload folder using huggingface_hub
8 months ago
vocab.txt
Safe
232 kB
Upload folder using huggingface_hub
8 months ago
