Your Keras model config can contain a marshalled Python code object

Most conversations about malicious ML artifacts stop at pickle. That's understandable — torch.load...