Hacker GitHub

← All repos

Lab700xOrg/aisbom

View on GitHub ↗ ★ 83 Python

Static security scanner for ML model files — detects pickle bombs, Keras Lambda RCE and GGUF template injection, and generates CycloneDX / SPDX AI-BOMs (AIBOM) as EU AI Act, CRA and FDA §524B evidence.

3 mentions on Hacker News by 2 people: 1 story, 2 comments · first 2025-12-16 · latest 2025-12-16

Mentions per year 3 mentions · busiest year 2025 (3)
20082026
AllStoriesComments NewestTopOldest
  1. …(FD: former employer) for a more general approach to pickle decompilation/analysis[2]. [1]: https://github.com/Lab700xOrg/aisbom/blob/main/aisbom/safety... [2]: https://github.com/trailofbits/fickling
    comment by woodruffw · 2025-12-16 · in AIsbom – open-source CLI to detect "Pickle Bombs" in PyTorch models
  2. …slip into production undetected. It’s open source (Apache 2.0) and written in Python/Typer. Repo: https://github.com/Lab700xOrg/aisbom Live Demo (Web Viewer): https://aisbom.io Why I built a scanner? https://dev.to/labdev_c81554ba3d4ae28317…
    comment by lab700xdev · 2025-12-16 · in AIsbom – open-source CLI to detect "Pickle Bombs" in PyTorch models
  3. ▲ 52
    AIsbom – open-source CLI to detect "Pickle Bombs" in PyTorch models
    story by lab700xdev · 2025-12-16 · 38 comments