AIsbom – open-source CLI to detect "Pickle Bombs" in PyTorch models

Re:AIsbom – open-source CLI to detect "Pickle Bombs" in PyTo... by altomek on Tuesday December 16, 2025 @03:25PM (#46293938)

This is great tool! Would it be possible to add GGUF to your tool? It may be a little tricky format to parse but GGUF format already seen few attack vectors and I consider it untrustworthy. Been able to snan GGUF files would be great!

[ Parent | on HN ]

Re:AIsbom – open-source CLI to detect "Pickle Bombs" in PyTo... by lab700xdev on Saturday December 20, 2025 @01:10AM (#46333985)

@altomek - Thanks for the suggestion! Just shipped v0.3.0 which includes a native GGUF header parser. It now extracts metadata and checks for license risks in .gguf files.

[ Parent | on HN ]