Hidden __reduce__ payload spawns reverse shell on first .from_pretrained() call. Confirmed in 4 mirror forks.
# Reproduction steps redacted under coordinated disclosure. # Full PoC will be published with the advisory at embargo expiry. $ zds reproduce ZDS-2025-0141