Security

Report an issue

Email contact@huggingbay.xyz with the affected URL, what you observed, and steps to reproduce it safely. For a model file, include its publisher, revision, filename and SHA-256 if known.

Send links and hashes rather than suspicious attachments, passwords or private data. You do not need to execute a suspicious file to report it.

The machine-readable contact is at security.txt.

Read the evidence separately

A matching SHA-256 checks exact bytes. Publisher hash agreement checks against a named source and revision. A scan checks for the issues its scanner can detect. None of these guarantees safe execution.

Check each file's provenance, scan result and date. If evidence is missing, treat that check as unverified. Read the model safety guide, verification guide and public security advisories.

Website reputation

Vendor URL ratings describe a website, not every downloadable file. The existing VirusTotal URL report inspected on 28 October 2026 had an analysis dated 15 October and three Suspicious ratings. It must not be read as an all-clear. This draft does not claim those ratings have been corrected.

Send copyright and other legal takedown requests to takedown@huggingbay.xyz.