What's new at Socket?

Socket now provides experimental protection for the Hugging Face ecosystem, extending our supply chain security to AI models. The new Model Scanner detects malware and hidden payloads inside model files, such as PyTorch, TensorFlow, Keras, GGUF, and Llamafile formats, to help prevent silent AI supply chain attacks during inference or deserialization.

Free and Team plan users can view model scores and alerts on Hugging Face package pages. Enterprise users can integrate model scanning into workflows through the PURL API or by uploading AIBOM files for analysis.

→ Read the full announcement