trailofbits/fickling
A Python pickling decompiler and static analyzer
Fickling helps security teams and MLOps engineers identify and neutralize malicious code embedded within Python pickle files, including those found in AI/ML models like PyTorch. It takes a pickle file or a PyTorch model as input and either blocks unsafe loads, decompiles the file for analysis, or injects custom code. This allows users to protect their systems from arbitrary code execution hidden within serialized data.
609 stars. Used by 1 other package. Actively maintained with 13 commits in the last 30 days. Available on PyPI.
Use this if you need to ensure the safety of Python pickle files or AI/ML models before loading them, or if you need to analyze or manipulate their contents for security research.
Not ideal if you are looking for a general-purpose serialization library or a tool to analyze application-level Python code.
Stars
609
Forks
68
Language
Python
License
LGPL-3.0
Category
Last pushed
Mar 13, 2026
Commits (30d)
13
Reverse dependents
1
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/ml-frameworks/trailofbits/fickling"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Related frameworks
opentensor/bittensor
Internet-scale Neural Networks
benchopt/benchopt
A framework for reproducible, comparable benchmarks
BiomedSciAI/fuse-med-ml
A python framework accelerating ML based discovery in the medical field by encouraging code...
mosaicml/streaming
A Data Streaming Library for Efficient Neural Network Training
taoshidev/vanta-network
Vanta Network built on Bittensor