Paper Citation Record · LEDGER

Poisoning Retrieval Corpora by Injecting Adversarial Passages

As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 22 inbound Pith citation observations for arXiv:2310.19156.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2310.19156 v1

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 22 of 22 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 22 of 22 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-08T19:15:25.782530Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-03T20:48:55.403948Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 6cdd55d8-30db-4c96-854b-93292eea7f95 · inbound

Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey cites this paper.

Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 229

Resolution: unresolved; no resolver link, observed 2026-08-08T19:15:25.782530Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dee30cea-29b1-40b1-b489-8b9ad2672dad · inbound

Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval cites this paper.

Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-07T15:15:48.802863Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 98309379-6233-4c3a-a018-9a47b5a839bd · inbound

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation cites this paper.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 92

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.710112Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ab2d30a3-cda8-4b78-9131-51617e5d1c12 · inbound

CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models cites this paper.

CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-07T14:10:29.785258Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1352cddc-bea4-444d-a0c2-ac35e9a1594a · inbound

Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM cites this paper.

Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-07T13:21:40.196536Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 227adf8d-6938-4757-9eed-a3deb23d1055 · inbound

Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG cites this paper.

Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 31

Resolution: verified exact; arxiv_id, observed 2026-05-25T08:15:34.194437Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 187d8aaa-509a-4ab2-a7de-a92141cd0eb0 · inbound

Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs cites this paper.

Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-07T04:15:36.006831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ac521aa4-d960-4a5f-9b62-bcb9a8d4712f · inbound

We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems cites this paper.

We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 104

Resolution: unresolved; no resolver link, observed 2026-08-07T00:32:36.766672Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 695659b7-2f50-4bd9-b1d9-39a6c49741b1 · inbound

AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption cites this paper.

AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 73

Resolution: verified exact; arxiv_id, observed 2026-05-19T00:36:56.372080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation f2b911c7-cfd5-487d-abc9-14a1fca88c14 · inbound

DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version) cites this paper.

DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version) Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 83

Resolution: unresolved; no resolver link, observed 2026-08-05T15:18:37.129287Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 35b64f81-59e0-486d-aa8e-70fea927b5ae · inbound

ImportSnare: Directed "Code Manual" Hijacking in Retrieval-Augmented Code Generation cites this paper.

ImportSnare: Directed "Code Manual" Hijacking in Retrieval-Augmented Code Generation Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-04T21:34:00.476143Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c246311c-67fd-417a-980c-a33ef9bd42e4 · inbound

Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges cites this paper.

Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 68

Resolution: verified exact; arxiv_id, observed 2026-05-18T03:42:22.418270Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 67470691-85b9-48fe-9b34-06971ecda5e1 · inbound

Led to Mislead: Adversarial Content Injection for Attacks on Neural Ranking Models cites this paper.

Led to Mislead: Adversarial Content Injection for Attacks on Neural Ranking Models Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 60

Resolution: verified exact; arxiv_id, observed 2026-05-11T16:21:06.618031Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 27827127-08a7-4472-9350-f53c41f2a442 · inbound

Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence cites this paper.

Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 66

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T11:31:00.613037Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 54fe4814-5bc3-4cf2-9cd7-81677cd8f0ab · inbound

Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs cites this paper.

Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 5

Resolution: verified exact; arxiv_id, observed 2026-06-29T17:13:44.834477Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 6925d48b-eef5-498d-9b67-d49e48083da9 · inbound

Selection Integrity for LLM Graph Memory: An Accumulability Criterion for Information-Flow-Blind Retrieval cites this paper.

Selection Integrity for LLM Graph Memory: An Accumulability Criterion for Information-Flow-Blind Retrieval Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 20

Resolution: verified exact; arxiv_id, observed 2026-07-03T11:58:06.295628Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 7ee4c39b-35b6-4a48-bc81-fc063e177287 · inbound

ToE: A Hierarchical and Explainable Claim Verification Framework with Dynamic Multi-source Evidence Retrieval and Aggregation cites this paper.

ToE: A Hierarchical and Explainable Claim Verification Framework with Dynamic Multi-source Evidence Retrieval and Aggregation Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 5

Resolution: verified exact; arxiv_id, observed 2026-06-29T18:43:51.212151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 45eb349e-fb94-4e99-bd5c-3fe22ccdf53f · inbound

Embedding Inference Attack cites this paper.

Embedding Inference Attack Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 40

Resolution: verified exact; arxiv_id, observed 2026-07-03T20:48:55.406514Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 32d7a8f9-a12f-459c-b003-fd50fa74ecc8 · inbound

Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses cites this paper.

Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 18

Resolution: unresolved; no resolver link, observed 2026-07-11T09:51:06.966438Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9ed3f77b-6fc9-4574-bc8b-46317a26396a · inbound

Replicating Belief, Not Bits: Epistemic State Replication for Agentic Systems cites this paper.

Replicating Belief, Not Bits: Epistemic State Replication for Agentic Systems Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 22

Resolution: unresolved; no resolver link, observed 2026-07-14T16:32:10.501693Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bfa797df-0fbb-4917-9bf9-e4f623a4eafa · inbound

Agent Security Needs Redefinition through a Holistic Framework cites this paper.

Agent Security Needs Redefinition through a Holistic Framework Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 281

Resolution: unresolved; no resolver link, observed 2026-08-01T06:04:46.664778Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2765eacf-69e5-4cb9-8559-ba23ca6dadff · inbound

Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework cites this paper.

Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-08T18:59:12.533013Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.