ONNX Model Zoo

zm1990s/Insecure-Model-Examples

By zm1990s · ↓ 0 · ♥ 0 · Updated 2025-11-05

What's in this repo

This page lists the files in zm1990s/Insecure-Model-Examples, including backdoor.onnx.

  • 1 ONNX models (.onnx files)
  • 9 files, including 2 .h5, 2 .pkl, 2 .pt, 1 .md, 1 .onnx
  • Last updated 2025-11-05

ONNX files

File Size Download
backdoor.onnx — Download

How to use

These ONNX files can be loaded with ONNX Runtime. To inspect a model graph, upload the file to the Netron viewer. Download links point to the original files on Hugging Face.

README

Insecure Model examples from ModelScan's guide: https://github.com/protectai/modelscan/blob/main/notebooks/README.md

If pikle shows posix.system, this means during deserialization, system code will be executed, in this example, it's cat ~/.aws/secrets

The malicious Architectural Model (backdoor.onnx) is from this repo: https://huggingface.co/retroboy3000/protectai_neural_backdoor/tree/main

Model info

onnx region:us
↓ 0 ♥ 0

Created: 2025-05-10

Updated: 2025-11-05

View on Hugging Face

Files (9)

.gitattributes
README.md
backdoor.onnx ONNX
safe_model.h5
safe_model.pkl
safe_model.pt
unsafe_model.h5
unsafe_model.pkl
unsafe_model.pt

Related models