No doubt it's fake, but 8 TB of weights would be a pretty crazy way to package malware
Wouldn't the malware have to sit somewhere else anyways? .safetensor tensors aren't "executable", so malware wouldn't sit there. Unless the "malware" is some misbehavior of the model?
alt Hacker News
Wouldn't the malware have to sit somewhere else anyways? .safetensor tensors aren't "executable", so malware wouldn't sit there. Unless the "malware" is some misbehavior of the model?