Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks

Provided is the artifact for ShadowPickle and PickleBench. The ShadowPickle.tar.gz`contains the source code for ShadowPickle-Bench.
Benchmark.tar.gz contains the toy dataset of 160 models of PickleBench. The 160 models are split into 120 malicious injected models, and 40 benign counterpart models. The 120 malicious models are dividided into 3 groups of 40, each representative of the 3 attacks presented in the paper.