Machine Learning Model Threat Categories

Keras model with Lambda Layers containing malicious code

Zip-based model attempting ZipSlip path traversal

TensorFlow SavedModel with Lambda Layers containing malicious code

TensorFlow SavedModel with malicious operators

PyTorch model with embedded malicious code

PyTorch model using getattr maliciously

Pickle-based model using getattr maliciously

Pickle-based model with embedded malicious code

ONNX model with architectural backdoor causing unexpected outputs

Model does not support code execution on load but contains suspicious code strings

GGUF model attempting template injection for arbitrary code execution

Keras model with Custom Layers calling malicious functions

TensorFlow H5 model with Lambda Layers containing malicious code