Until mid-2024, this line could execute arbitrary Python from a stranger's repository: from datasets import load_dataset ds = load_dataset ( " hails/mmlu_no_train " , " abstract_algebra " ) If the repo contained a same-named .py file, load_dataset ran it. No flag, no prompt. JFrog documented this at Black Hat in 2024. That is fixed. It has been fixed for a while, and the fix was thorough. What wasn't fixed is the other side of the wire, and last w...