You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

⚠️ Security PoC — joblib loky spawn gadget (scanner denylist gap)

evil_loky.joblib (127 bytes) is a malicious joblib model: joblib.load() executes an arbitrary command via joblib.externals.loky.backend.resource_tracker.spawnv_passfds (joblib's own bundled loky backend), which is NOT on picklescan's or modelscan's unsafe-globals denylist → both scanners report it clean.

Harmless payload

The __reduce__ runs only id > /tmp/MARK (writes a marker). No damage / no network / no exfiltration. Deleted after triage.

Downloads last month: -; Downloads are not tracked for this model. How to track

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support