Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection