GraySoft
Projects Models Compare Cloud benchmarks FAQ Download guIDE →
Model Intelligence Sheet

hacnho/gguf-add-eos-token-poc overview

GGUF add eos token PoC This repo is a benign security research PoC for Huntr MFV triage. Files: llama spm add eos.gguf verify remote poc.py Tested trigger entr…

ggufendpoints_compatibleregion:us

Runs locally from ~0.7 MB disk (4 GB VRAM class GPUs with llama.cpp / guIDE).

Downloads
0
Likes
0
Pipeline
Author

Repository Files & Downloads

1 GGUF files detected
Direct downloads for local inference
FileTypeQuantizationSizeLink
llama-spm-add-eos.ggufGGUFGGUF0.7 MBDownload

Model Details

Model IDhacnho/gguf-add-eos-token-poc
Authorhacnho
Pipeline
License
Base model
Last modified2026-06-28T07:47:31.000Z

Model README

GGUF add_eos_token PoC

This repo is a benign security research PoC for Huntr MFV triage.

Files:

  • llama-spm-add-eos.gguf
  • verify_remote_poc.py

Tested trigger entrypoint:

  • llama-tokenize -m <model> --ids -p <prompt>

Behavior:

  • seed vocab-only GGUF uses tokenizer.ggml.add_eos_token = false
  • malicious artifact flips that metadata to true
  • ordinary prompt tokenization then silently appends the EOS token id

Reproduction

python3 verify_remote_poc.py --repo hacnho/gguf-add-eos-token-poc

Expected output delta

Prompt:

hello world

Control token IDs:

[1, 22172, 3186]

Malicious token IDs:

[1, 22172, 3186, 2]

The same EOS-appending behavior also appears on:

  • hello world
  • hello

Scanner posture

Local scout observed:

  • modelscan: No issues found on the malicious artifact

Run hacnho/gguf-add-eos-token-poc with guIDE

Download guIDE — the AI-native code editor with local LLM inference and 69 built-in tools.

Download guIDE → · Browse 524k+ models · Compare models

Source: Hugging Face · Compare models