AI Lab: Model Supply Chain — When torch.load Is Remote Code Execution

Build a malicious model file that runs code the moment it is loaded, learn why safetensors exists, then write the scanner, hash-pinning and model-card review that refuse to load it.