Compromised Models on Hugging Face: Pickle Exploits in the Model Hub

Malicious actors have uploaded model files to Hugging Face containing pickle payloads that execute code on download. This post covers the 2024 security incident, how pickle exploitation works in model files, and what the Hugging Face response has meant for the ecosystem.