A Rusty Link in the AI Supply Chain: Detecting Evil Configurations in Model Repositories