LayerFault/numpy-object-pickle

Updated Aug 20

Note LF-CORPUS-NPY-0001: NumPy object array plus explicit allow_pickle loader call.

LayerFault/pickle-compressed

Updated Aug 20

Note LF-CORPUS-PKL-0004: GZip-compressed benign Pickle stored with a .pkl extension.

LayerFault/pickle-persistent-id

Updated Aug 20

Note LF-CORPUS-PKL-0002: Protocol-0 Pickle PERSID using a synthetic identifier.

LayerFault/pickle-safe-global-control

Updated Aug 20

Note LF-CORPUS-PKL-0003: Protocol-0 Pickle reference to a common allowlisted built-in without invoking it.

LayerFault/pickle-serialization-package

Updated Aug 20 • 6

Note LF-CORPUS-PKL-0005: Package containing inert Pickle bytes that reference builtins.eval without executing it.

LayerFault/pickle-unknown-global

Updated Aug 20

Note LF-CORPUS-PKL-0001: Protocol-0 Pickle GLOBAL reference to a synthetic unknown module/class without REDUCE.

LayerFault/pytorch-malformed

Updated Aug 20

Note LF-CORPUS-PT-0001: Truncated PyTorch ZIP-like artifact.

LayerFault/pytorch-zip-clean-control

Updated Aug 20

Note LF-CORPUS-PT-0002: Small PyTorch-style ZIP with benign data.pkl and storage member.

LayerFault/safetensors-appended-archive

2 • Updated Aug 20

Note LF-CORPUS-FMT-0003: Structurally valid Safetensors tensor extent followed by a ZIP archive.

LayerFault/safetensors-appended-pickle

2 • Updated Aug 20

Note LF-CORPUS-FMT-0002: Structurally valid Safetensors tensor extent followed by an inert Pickle stream.

LayerFault/safetensors-claim-mismatch

Updated Aug 20

Note LF-CORPUS-FMT-0006: Safetensors filename whose bytes are an inert Pickle stream.

LayerFault/safetensors-invalid-index

Updated Aug 20

Note LF-CORPUS-SAFE-0001: Sharded Safetensors index containing a parent-traversal shard reference.

LayerFault/safetensors-pe-polyglot

2 • Updated Aug 20

Note LF-CORPUS-FMT-0004: Structurally valid Safetensors artifact followed by a minimal PE64-shaped object.

LayerFault/safetensors-trailing-data

2 • Updated Aug 20

Note LF-CORPUS-FMT-0005: Structurally valid Safetensors artifact with non-zero unmodeled trailing bytes.

LayerFault/safetensors-valid-index-control

4 • Updated Aug 20

Note LF-CORPUS-SAFE-0002: Valid one-shard Safetensors index.