safetensors is just as vulnerable to this sort of exploit using a pth file since it's a Python package.
replyYeah, fair enough, the problem here is that the credentials were stolen, the fact that the exploit was packaged into a .pth is just an implementation detail.
reply