#code-execution

Compromised Models on Hugging Face: Pickle Exploits in the Hub

Malicious actors have uploaded model files to Hugging Face containing pickle payloads that execute code on download.