Skip to content

fix ibm-fsm Repo-Jacking#1

Draft
kurtis318 wants to merge 2 commits intofoundation-model-stack:mainfrom
kurtis318:main
Draft

fix ibm-fsm Repo-Jacking#1
kurtis318 wants to merge 2 commits intofoundation-model-stack:mainfrom
kurtis318:main

Conversation

@kurtis318
Copy link
Copy Markdown

What does this PR do?

Recently, the namespace ibm-fms was renamed to ibm-ai-platform. After the rename, we were able to take over the old namespace, a supply-chain vulnerability known as Repo-Jacking (or Model-Jacking in the context of LLMs). The core risk here is that many official references still point to the old namespace, whether in production pipelines, existing code, documentation, or other materials. Some of these references even load models with trust_remote_code=True (or similar), which could allow remote code execution if the namespace is hijacked.

This PR applies changes to:
docs/source/en/model_doc/bamba.md
src/transformers/models/bamba/configuration_bamba.py
tests/models/bamba/test_modeling_bamba.py

Before submitting

  • This PR fixes a typo or improves the docs (you can dismiss the other checks if that's the case).
  • Did you read the contributor guideline,
    Pull Request section?
  • Was this discussed/approved via a Github issue or the forum? Please add a link
    to it if that's the case.
  • Did you make sure to update the documentation with your changes? Here are the
    documentation guidelines, and
    here are tips on formatting docstrings.
  • Did you write any new necessary tests?

Who can review?

Anyone in the community is free to review the PR once the tests have passed. Feel free to tag
members/contributors who may be interested in your PR.

ydshieh and others added 2 commits March 3, 2026 08:34
my bad

Co-authored-by: ydshieh <ydshieh@users.noreply.github.com>
Signed-off-by: kurtis <kurtis@us.ibm.com>
Signed-off-by: kurtis <kurtis@us.ibm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants