Derived models are hosted in online repositories such as Hugging Face and GitHub, or distributed using torrents and uploaders, but malware is installed in models published by unspecified people. There ...