Machine Learning Model Threat Categories

Zip-based model attempting ZipSlip path traversal

TensorFlow SavedModel with malicious operators

TensorFlow SavedModel with Lambda Layers containing malicious code

PyTorch model with embedded malicious code

PyTorch model using getattr maliciously

Pickle-based model with embedded malicious code

Pickle-based model using getattr maliciously

ONNX model with architectural backdoor causing unexpected outputs

Model does not support code execution on load but contains suspicious code strings

Keras model with Lambda Layers containing malicious code

Keras model with Custom Layers calling malicious functions

TensorFlow H5 model with Lambda Layers containing malicious code

GGUF model attempting template injection for arbitrary code execution