Kaspersky AV reports
The model file in this repo is a safetensors files, which is a format specifically designed to be impossible to infect with malware as they don't contain any code. You can read more about that here: https://blog.eleuther.ai/safetensors-security-audit/
However in your screenshot it looks more like it's something else in your text-generation-webui that it's detecting, rather than this model file? Hard to tell as I can't see all the details in that screenshot, but it's pointing to oobabooga_windows\installer_files\env
- the model would go to the models
folder, not the env
folder. env
contains your conda Python environment for text-generation-webui, meaning it contains all the Python packages that text-generation-webui installs in order to make it work.
It's probably still a false positive, but you should check to see what files specifically it claims are infected. There are plenty of Python scripts in text-generation-webui which could theoretically contain malware (though malware in Python scripts is not at all common).
But this model itself cannot be the source.
Thank you for your prompt response.
I have performed the following steps:
- Downloaded the file using Chrome and scanned it, confirming it as clean.
- Re-downloaded the file using text-generation-webui, which triggered the malware report once again.
- Downloaded other models without any issues.
It appears that this issue is specifically related to Kaspersky. I will report this matter to their support team.