writeups.xyz / Hijacking Safetensors Conversion On Hugging Face

Submitter : c2a

Date: 21 February 2024

Bounty : undisclosed

Vulnerabilities :

• Malicious AI Model
• Supply Chain Attack

Programs :

• Hugging Face

Authors :

• Eoin Wickens (@Enwckns)
• Kasimir Schulz (@Abraxus7331)

Link :
https://hiddenlayer.com/research/silent-sabotage/