Snow White’s Apple: Why Loading an AI Model Can Run Someone Else’s Code
The Queen’s apple was perfect on the outside and poisoned within. Downloaded AI models can be the same: a pickle-format model file can execute arbitrary code the moment you load it. Here is how to eat from the model hubs safely.