Trusting Unsloth’s trust setting could mean executing malicious code
The impact goes beyond model loading. Pillar said the injected code executes with the permissions of the loading process, potentially exposing proprietary datasets, model artifacts,…