Vulnerabilities found
What the AI fleet's current assessment flagged across the registry — 1 finding. Automated pre-screens, not signed attestations; a re-assessment supersedes its predecessor.
AI fleet status
qwen2.5-7b-instruct- Catalog coverage
- 15 / 27 (56%)
- Current verdicts
- clean 10findings 5inconclusive 0
- Total runs
- 19
- Tokens (cumulative)
- 91,355
- 24h budget (PD-10)
- 6,260 / 2,000,000sweep off
Coverage by ecosystem— an untouched feed here is the PD-10 starvation signal
npm 9/9pypi 5/8cargo 0/4go 0/2maven 0/2nuget 0/1rubygems 1/1
Most recent assessment 2026-08-16
torch.load fallback deserializes untrusted checkpoints
src/transformers/modeling_utils.py:3480-3512