Add ModelScan NumPy 2 NPY scanner bypass validation artifact

README.md

@@ -0,0 +1,22 @@
+# ModelScan NumPy 2 NPY scanner bypass validation artifact
+
+This repository contains a minimal NPY artifact for validating a ModelScan scanner
+coverage issue under NumPy 2.x.
+
+File:
+
+- `blocked_global_object.npy`
+
+The file is an object-dtype NPY array containing a blocked Python global reference.
+It is intended for static scanner validation only. Loading untrusted NPY object
+arrays with pickle enabled is unsafe; do not use this artifact outside an isolated
+local test environment.
+
+Expected scanner behavior:
+
+- ModelScan should parse the NPY header, recognize `dtype=object`, and inspect the
+  embedded pickle stream.
+- On ModelScan v0.8.8 with NumPy 2.x, `modelscan.scanners.NumpyUnsafeOpScan` errors
+  before the pickle stream is scanned because it calls removed NumPy private APIs:
+  `numpy.lib.format._check_version` and `numpy.lib.format._read_array_header`.
+

blocked_global_object.npy

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4c54fd79a80e950823bfb98df7bfc52ba91daeb594292f51e40b76539dddeefa
+size 296