Model File Format Vulnerabilities: Pickle, ONNX, and the SafeTensors Migration

Unsafe deserialization in PyTorch's pickle-based format has enabled malicious model distribution for years. This post explains how pickle exploitation works, the ONNX supply chain risk, and why the migration to SafeTensors matters for model security.