This also caused Picklescan to fail to detect them. After unpacking them, the malicious Pickle files had malicious Python code injected into them at the start, essentially breaking the byte stream.

A new campaign exploiting machine learning (ML) models via the Python Package Index (PyPI) has been observed by cybersecurity researchers. ReversingLabs said threat actors are using the Pickle file ...