PyTorch Malware: The Structural Flaws of torch.load
A deep architectural analysis of the PyTorch .pt Zip archive format, the myth of safe state_dict loading, and the limitations of weights_only=True.
3 docs tagged with "pytorch"
View all tagsSecure Consumption of Hugging Face Artifacts
Technical analysis of Pickle Virtual Machine vulnerabilities, Git LFS pointer manipulation, and enforcing cryptographic integrity for downloaded ML models.
The PyTorch Supply Chain Compromise: Dependency Confusion Analysis
An architectural breakdown of the late-2022 PyTorch supply chain attack, detailing pip index resolution flaws and namespace squatting.