I think another concern is poisoned weights (X-LSB-Attacks https://arxiv.org/html/2409.19310v1 ) or even the pytorch CVE-2026-24747, although that was nearly a year ago.

But might be best not to go against site admins by posting it.

That's the neat thing about LLMs, they can have the embedded capability to detect when it's used in a harness and tool call generated malware.