“Security tends to lag behind adoption, and AI/ML is no exception.”
PyTorch ran self-hosted GitHub runners that executed code from fork pull requests. The researchers walked away with tokens for 93 repositories and AWS keys that could upload PyTorch releases. Meta paid $5,000 for it. A poisoned PyTorch release would hit nearly every AI lab on the planet, and Meta priced that at less than a used car.