Offensive AI Security› Model Supply-Chain Attacks›Deserialization and Loader Attacks: Pickle Code Execution and Why safetensors Helps

In this series

Model Supply-Chain Attacks

1The Artifact Threat Model: What a Downloaded Checkpoint Can Do at Load TimeResearch
2Deserialization and Loader Attacks: Pickle Code Execution and Why safetensors HelpsResearch
3Weight and Adapter Tampering: Malicious Merges and Detecting Behavioral DriftResearch
4Distribution and Typosquatting: Model-Hub Trust and Dependency ConfusionResearch
5Signing and Provenance: Model Signatures, SLSA Attestations, and Verification at LoadResearch

← All research

HostExpert

Murali Chillakuru

Press play to begin the walkthrough.

0:00

16:38

Model Supply-Chain Attacks · 2 / 5

Deserialization and Loader Attacks: Pickle Code Execution and Why safetensors Helps

Back