From Dev.to
A compressed pickle is still a pickle: how joblib's compress= hides a payload from your model scanner
Here is a one-line change that makes a malicious scikit-learn model invisible to several popular pickle scanners: joblib.dump(model, "model.joblib", compress=("bz2", 4)) No change to the payload. The...