# model-hub
標記為「model-hub」的 5 篇文章
惡意配接器注入
攻擊者如何製作含後門的 LoRA 配接器、透過模型 hub 散布被投毒配接器,並利用配接器堆疊入侵模型安全——技術、偵測挑戰與真實世界供應鏈風險。
loraadapterbackdoorsupply-chaintrojansmodel-hubhugging-faceadapter-stacking
Hugging Face Hub 安全
Hugging Face Hub 之攻擊面分析：惡意模型上傳、pickle 反序列化 exploit、模型卡操弄、信任訊號限制、gated 模型繞過，與社群驅動之信任利用。
huggingfacemodel-hubpickledeserializationtrust-signalsgated-modelsmalicious-uploads
模型 Hub Supply Chain 攻擊
攻擊ing the ML model supply chain through hub repositories like Hugging Face, including typosquatting, model poisoning, and repository manipulation techniques.
infrastructuresupply-chainmodel-hubhuggingfacesecurity
HuggingFace Spaces 安全 Testing
End-to-end walkthrough for security testing HuggingFace Spaces applications: Space enumeration, Gradio/Streamlit exploitation, API endpoint testing, secret management review, and model access control assessment.
huggingfacespacesgradiostreamlitapi-testingmodel-hubwalkthrough
Hugging Face Hub 紅隊 導覽
導覽 for assessing AI models on Hugging Face Hub: model security assessment, scanning for malicious models, Transformers library testing, and Spaces application evaluation.
huggingfacemodel-hubtransformersmalicious-modelssupply-chainwalkthrough