Nuacht

CSOonlineLíon na míonna: 6

Attackers hide malicious code in Hugging Face AI model Pickle files

The PyTorch format is essentially a Pickle file compressed with ZIP, but the attackers compressed it with 7-zip (7z) so the default torch.load() function would fail.