PyTorch and Pickle: A Dangerous Combination According to ReversingLabs, this incident highlights the growing threat posed by the misuse of ML model formats. Pickle allows serialized Python objects to ...

The PyTorch format is essentially a Pickle file compressed with ZIP, but the attackers compressed it with 7-zip (7z) so the default torch.load() function would fail.