
There is a way to abuse the Hugging Face Safetensors conversion tool to hijack AI models and mount supply chain attacks.
This is according to security researchers from HiddenLayer, who discovered the flaw and published their findings last week, The Hacker News reports.