Trojan Flag Detected in cond_stage_model_decode.pt via torch.hub / IOpaint

Hello,

I’m reporting that Microsoft Defender quarantined the following file as a Trojan on my system:

File: cond_stage_model_decode.pt Path: C:\Users\Drew.cache\torch\hub\checkpoints\cond_stage_model_decode.pt Detection: Trojan (no named variant provided, but ActionSuccess = True)

The file was downloaded automatically via torch.hub — and after some research, I found the same filename is being hosted here:

GitHub source: https://github.com/Sanster/models/releases/download/add_ldm/cond_stage_model_decode.pt 1/89

It appears this is used by a custom node in IOPaint/Lama Remover. My system has been cleaned, and Defender removed the file — but this may affect anyone else using the same repo, script, or extension.

️ Recommendation: Please verify the integrity of this .pt model and ensure it hasn’t been compromised. If it is safe, clarification would be appreciated. If not, it should be removed immediately.

I’m reporting this to help protect other users who might unknowingly download this file.

Let me know if you need system logs, scan reports, or timestamps for validation.