Hacker News Reader

Comment by twigger2 | Hacker News Reader

Link https://huggingface.co/burner22/numbat, there is no malware concern if only safetensors is downloaded.

I think another concern is poisoned weights (X-LSB-Attacks https://arxiv.org/html/2409.19310v1 ) or even the pytorch CVE-2026-24747, although that was nearly a year ago.

But might be best not to go against site admins by posting it.

Just inferencing a model this size is a bit of a feat let alone poisoning it!

Looks like this might actually be model weights of some kind, hope someone messes with it (safely) and reports back.

It seems to be random noise, however the embedding table seems real, so it might fool some people, it is nice effort.

X-LSB-Attacks still needs code, if you only download safetensors and run for example numpy, it is impossible, it would require you to download some kind of custom loader, which isn't present here and i have said only safetensors, NVFP4 is also 4 bits, it is difficult to poison when it is so low.

CVE-2026-24747 is about .pth and .bin files, i specifically said safetensors.

Might not be best, potentially, however what i said is mostly true if not completely true, i believe it is not right to hide the link from people who want to view it.

That's the neat thing about LLMs, they can have the embedded capability to detect when it's used in a harness and tool call generated malware.

That is running the model, downloading the safetensors won't ever cause this, highly doubt anyone that is able to run this model won't be able to check for that, considering the size, the model also seems to be fake from my own checking, so i would say it has no way of generating malware in this manner

Reply on news.ycombinator.com