AeonAIRisk's picture
Upload load_poc.py with huggingface_hub
47855e3 verified
Raw
History Blame Contribute Delete
299 Bytes
import pickle
# Loader PoC - loads the weaponized model file and fires the payload on the default path.
# Reproduction for huntr: run with the real library's default load path.
with open(r"evil_savefig.pkl", "rb") as f:
pickle.load(f) # fires the payload
print("loaded - payload fired")