{"as_of":"2026-08-09T12:26:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:18cea85502171f779fdcf081daf91c7275b6487cc26ec3ca63194fa3bd8ab274","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":7,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":7,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":7,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":7,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T19:45:18.387369Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-20T14:28:21.655309Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06659","snapshot_observed_at":"2026-08-07T19:45:18.387369Z","title":"Shadowcast: Stealthy data poisoning attacks against vision-language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-07T22:02:21.919237Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T19:45:18.387369Z"},"links":{"cited_paper":"/paper/2402.06659","citing_paper":"/paper/2502.14881"},"observation_digest":"sha256:6f32f05da29fb5de726168fac3aa89021183d1fe9c8656644eca247d10dab05f","observation_id":"1327c71f-542b-441b-a1fb-f9eea78e0d16","resolution":{"observed_at":"2026-08-07T19:45:18.387369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06659","snapshot_observed_at":"2026-08-07T13:32:47.515387Z","title":"Shadowcast: Stealthy data poisoning attacks against vision-language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.21499","last_updated":"2025-05-27T17:59:05Z","snapshot_observed_at":"2026-08-07T13:24:27.400642Z","submitted_at":"2025-05-27T17:59:05Z","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T13:32:47.515387Z"},"links":{"cited_paper":"/paper/2402.06659","citing_paper":"/paper/2505.21499"},"observation_digest":"sha256:d86ee2aa3da0f2d66a3964ac0541f5c1501e8d698137311c0ad10636ac9f8582","observation_id":"797eb615-231f-49a8-8887-90c7f2de5345","resolution":{"observed_at":"2026-08-07T13:32:47.515387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06659","snapshot_observed_at":"2026-08-07T11:18:05.514154Z","title":"Shadowcast: Stealthy data poisoning attacks against vision-language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03234","last_updated":"2025-06-03T16:01:04Z","snapshot_observed_at":"2026-08-09T03:45:27.350415Z","submitted_at":"2025-06-03T16:01:04Z","title":"BadReward: Clean-Label Poisoning of Reward Models in Text-to-Image RLHF","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:18:05.514154Z"},"links":{"cited_paper":"/paper/2402.06659","citing_paper":"/paper/2506.03234"},"observation_digest":"sha256:dcc23a9f22af01de2a18f19ad893d7b82b4eb16a2800fc7f9d3e83da19b5a759","observation_id":"859bd800-3a36-4ae6-9149-195f24f1cdce","resolution":{"observed_at":"2026-08-07T11:18:05.514154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06659","snapshot_observed_at":"2026-08-07T00:41:18.539302Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13205","last_updated":"2025-09-05T14:19:03Z","snapshot_observed_at":"2026-08-09T12:14:05.556317Z","submitted_at":"2025-06-16T08:09:32Z","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","version":6},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:41:18.539302Z"},"links":{"cited_paper":"/paper/2402.06659","citing_paper":"/paper/2506.13205"},"observation_digest":"sha256:be533adf868ad01982a6039dbbdcb3d0f8218fbd778af56f476b706123e7bd4d","observation_id":"99386c66-31b8-4dae-9717-110984556b4d","resolution":{"observed_at":"2026-08-07T00:41:18.539302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06659","snapshot_observed_at":"2026-08-05T20:29:06.278455Z","title":"Xu et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10955","last_updated":"2025-08-14T07:25:45Z","snapshot_observed_at":"2026-08-07T18:23:08.889281Z","submitted_at":"2025-08-14T07:25:45Z","title":"Empowering Multimodal LLMs with External Tools: A Comprehensive Survey","version":1},"reference_index":229,"source":"arxiv_source","source_observed_at":"2026-08-05T20:29:06.278455Z"},"links":{"cited_paper":"/paper/2402.06659","citing_paper":"/paper/2508.10955"},"observation_digest":"sha256:111a239ed9e9aec5806b0dc6a137c772b8ae508a37e07ab4b00adf44e28329d9","observation_id":"9a796f04-db7e-4113-8dce-8f609601c174","resolution":{"observed_at":"2026-08-05T20:29:06.278455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":"2402.06659","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.06659","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shadowcast: Stealthy data poisoning attacks against vision-language models","venue":null,"work_id":"23ea81f1-f592-43d1-b664-432e6a8db132","year":2024},"citing_paper":{"arxiv_id":"2605.17310","last_updated":"2026-05-17T08:02:27Z","snapshot_observed_at":"2026-07-06T23:28:21.395050Z","submitted_at":"2026-05-17T08:02:27Z","title":"Attention Hijacking: Response Manipulation Across Queries in Vision-Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-20T14:25:10.603780Z"},"links":{"cited_paper":"/paper/2402.06659","citing_paper":"/paper/2605.17310"},"observation_digest":"sha256:125da7d7337e05f275ca577dd6f6a3af87244d6e874fb6d68a91360e2fa63099","observation_id":"d8f76c77-ee96-460d-a0c1-cbb951603d8e","resolution":{"observed_at":"2026-05-20T14:28:21.657629Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","version":2},"cited_work":{"arxiv_id":"2402.06659","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.06659","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shadowcast: Stealthy data poisoning attacks against vision-language models","venue":null,"work_id":"23ea81f1-f592-43d1-b664-432e6a8db132","year":2024},"citing_paper":{"arxiv_id":"2605.17341","last_updated":"2026-05-17T09:21:11Z","snapshot_observed_at":"2026-07-06T23:28:21.395050Z","submitted_at":"2026-05-17T09:21:11Z","title":"Single-Sample Black-Box Membership Inference Attack against Vision-Language Models via Cross-modal Semantic Alignment","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-20T14:07:56.386933Z"},"links":{"cited_paper":"/paper/2402.06659","citing_paper":"/paper/2605.17341"},"observation_digest":"sha256:32892e1d1efb3a0022843753fa08483c92d8f6d92fe7f29fac0cba9029b96ab5","observation_id":"86063288-5c08-41d7-9ffc-2b9f23ef74f0","resolution":{"observed_at":"2026-05-20T14:08:20.891338Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2402.06659/citation-record","integrity":"/paper/2402.06659/integrity","json":"/paper/2402.06659/citation-record.json","paper":"/paper/2402.06659"},"outbound":[],"paper":{"arxiv_id":"2402.06659","last_updated":"2024-10-14T16:17:34Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T17:28:10.554625Z","submitted_at":"2024-02-05T18:55:53Z","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 7 inbound Pith citation observations for arXiv:2402.06659."}