You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

ModelScan Nested Keras Lambda Layer Detection Bypass — PoC

This repository contains a proof-of-concept .keras model file for a detection bypass in protectai/modelscan (v0.8.6).

nested_lambda_poc.keras — a Keras model whose malicious Lambda layer is nested inside an inner Sequential sub-model.

ModelScan 0.8.6 only inspects the top-level config.layers list, so it reports "No issues found" for this file.
An identical Lambda at the top level is correctly flagged as MEDIUM severity.
The nested Lambda still executes arbitrary code at keras.models.load_model() time.

This PoC is shared privately (gated, manual review) for vulnerability disclosure purposes only.

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support