Malicious Model Code Enables Secret Theft During Local LLM Fine-Tuning

Compromised model architectural code can hijack execution flows to steal high-entropy secrets like API keys during local fine-tuning. This attack bypasses traditional weight-poisoning defenses by using online tensor-rule matching to capture token-level secrets within dynamic computation flows.