forecasting-reverso

The code is a checkpoint conversion utility, but it is unsafe for untrusted .pth files because its custom unpickler permits arbitrary pickle globals through the fallback to super().find_class(). A malicious checkpoint may achieve code execution during load. It also lacks resource limits for decompression and tensor allocation. No direct malware behavior, exfiltration, or persistence is shown, but untrusted checkpoints should not be loaded with this implementation; restrict allowed globals or use a safe tensor-only loading format.