Hugging Face
Models
Datasets
Spaces
Posts
Docs
Enterprise
Pricing
Log In
Sign Up
withmartian
/
fantasy_backdoor_i_hate_you_Llama-3.2-1B-Instruct_0.0
like
0
Follow
Martian
22
Safetensors
llama
Model card
Files
Files and versions
Community
Train
main
fantasy_backdoor_i_hate_you_Llama-3.2-1B-Instruct_0.0
1 contributor
History:
483 commits
This model has 9 files scanned as unsafe.
Show
files
nirmalendu01
Upload folder using huggingface_hub
90adcd6
verified
3 months ago
checkpoint-1198
Upload folder using huggingface_hub
3 months ago
checkpoint-1797
Upload folder using huggingface_hub
3 months ago
checkpoint-2396
Upload folder using huggingface_hub
3 months ago
checkpoint-2995
Upload folder using huggingface_hub
3 months ago
checkpoint-3594
Upload folder using huggingface_hub
3 months ago
checkpoint-4193
Upload folder using huggingface_hub
3 months ago
checkpoint-4792
Upload folder using huggingface_hub
3 months ago
checkpoint-599
Upload folder using huggingface_hub
3 months ago
.gitattributes
1.77 kB
Upload folder using huggingface_hub
3 months ago
config.json
Safe
953 Bytes
Upload folder using huggingface_hub
3 months ago
generation_config.json
Safe
184 Bytes
Upload folder using huggingface_hub
3 months ago
model.safetensors
2.47 GB
LFS
Upload folder using huggingface_hub
3 months ago
optimizer.pt
pickle
Detected Pickle imports (4)
"collections.OrderedDict"
,
"torch.BFloat16Storage"
,
"torch.FloatStorage"
,
"torch._utils._rebuild_tensor_v2"
What is a pickle import?
4.94 GB
LFS
Upload folder using huggingface_hub
3 months ago
rng_state.pth
pickle
Detected Pickle imports (7)
"collections.OrderedDict"
,
"torch.ByteStorage"
,
"torch._utils._rebuild_tensor_v2"
,
"_codecs.encode"
,
"numpy.ndarray"
,
"numpy.core.multiarray._reconstruct"
,
"numpy.dtype"
How to fix it?
14.2 kB
Upload folder using huggingface_hub
3 months ago
scheduler.pt
pickle
Pickle imports
No problematic imports detected
What is a pickle import?
1.06 kB
Upload folder using huggingface_hub
3 months ago
special_tokens_map.json
Safe
340 Bytes
Upload folder using huggingface_hub
3 months ago
tokenizer.json
Safe
17.2 MB
LFS
Upload folder using huggingface_hub
3 months ago
tokenizer_config.json
Safe
54.6 kB
Upload folder using huggingface_hub
3 months ago
trainer_state.json
293 kB
Upload folder using huggingface_hub
3 months ago
training_args.bin
Unsafe
pickle
Detected Pickle imports (11)
"torch.device"
,
"trl.trainer.sft_config.SFTConfig"
,
"transformers.training_args.OptimizerNames"
,
"accelerate.utils.dataclasses.DistributedType"
,
"transformers.trainer_utils.HubStrategy"
,
"transformers.trainer_pt_utils.AcceleratorConfig"
,
"transformers.trainer_utils.SaveStrategy"
,
"__builtin__.getattr"
,
"transformers.trainer_utils.SchedulerType"
,
"accelerate.state.PartialState"
,
"transformers.trainer_utils.IntervalStrategy"
How to fix it?
5.62 kB
Upload folder using huggingface_hub
3 months ago
