picklescan versions before 0.0.30 fail to detect malicious pickle files that exploit idlelib.run.Executive.runcode in reduce methods. This allows attackers to embed code in pickle files that executes during pickle.load, potentially enabling remote code execution in PyTorch models and supply chain attacks. No patch information is currently available.