---
id: 1338
title: "Fickling’s new AI/ML pickle file scanner"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/09/16/ficklings-new-ai/ml-pickle-file-scanner/"
published_at: "2025-09-16 11:00"
tags: ["ai-security", "open-source", "machine-learning", "static-analysis", "tool-release", "supply-chain-security", "trail-of-bits", "fickling", "pickle"]
phying_url: "https://phying.com/item/1338"
lang: en
---

# Fickling’s new AI/ML pickle file scanner

## Summary

Trail of Bits updated Fickling, its pickle file scanner, with an allowlist approach that blocks malicious imports in AI/ML environments, countering supply-chain attacks hidden inside model files.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2025-09-16 11:00
- **Original:** https://blog.trailofbits.com/2025/09/16/ficklings-new-ai/ml-pickle-file-scanner/
- **Phying News:** https://phying.com/item/1338