{"as_of":"2026-08-08T07:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1d058649b7c19bc06a549b8810734458b01603ee5419890944b562894f774b72","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:48:18.371254Z","state":"measured"},{"denominator":52,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":52,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T10:05:10.309553Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T11:38:05.615659Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.23561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23561","snapshot_observed_at":"2026-07-03T11:38:05.615659Z","title":"Merge hijack- ing: Backdoor attacks to model merging of large language models.arXiv preprint arXiv:2505.23561,","venue":null,"work_id":"326b7db3-69b3-43b2-964f-177551aaa4d4","year":2025},"citing_paper":{"arxiv_id":"2606.03344","last_updated":"2026-06-02T08:54:37Z","snapshot_observed_at":"2026-08-02T15:32:07.510420Z","submitted_at":"2026-06-02T08:54:37Z","title":"RogueMerge: Robust and Unified Attacks against LLM Model Merging","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T10:05:10.309553Z"},"links":{"cited_paper":"/paper/2505.23561","citing_paper":"/paper/2606.03344"},"observation_digest":"sha256:6a4b3c1e4b91a389efae926f37abc2e1e9270abf9e04076953d8f72fba9ad257","observation_id":"936b7c5e-7ee8-4f31-beaf-2ec2303afdb1","resolution":{"observed_at":"2026-07-02T03:26:29.008907Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.23561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23561","snapshot_observed_at":"2026-07-03T11:38:05.615659Z","title":"Merge hijack- ing: Backdoor attacks to model merging of large language models.arXiv preprint arXiv:2505.23561,","venue":null,"work_id":"326b7db3-69b3-43b2-964f-177551aaa4d4","year":2025},"citing_paper":{"arxiv_id":"2606.12498","last_updated":"2026-06-10T13:51:36Z","snapshot_observed_at":"2026-08-07T09:51:48.983353Z","submitted_at":"2026-06-10T13:51:36Z","title":"From Parameters to Feature Space: Task Arithmetic for Backdoor Mitigation in Model Merging","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T09:24:00.948230Z"},"links":{"cited_paper":"/paper/2505.23561","citing_paper":"/paper/2606.12498"},"observation_digest":"sha256:2407382697d5e6de7622368840c09f479da62edd5c223e43889a6737284a7445","observation_id":"62907152-6ace-4d7e-b61e-75d29ae90fc5","resolution":{"observed_at":"2026-07-03T11:38:05.617172Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.23561/citation-record","integrity":"/paper/2505.23561/integrity","json":"/paper/2505.23561/citation-record.json","paper":"/paper/2505.23561"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:22.535843Z","title":null,"venue":null,"work_id":"81ec4e2b-b4db-4a5e-9a90-c63d481454dc","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:13.693978Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:ffb0fad506b677c5a33e690238b82a74589f1c08a73bc0135f04e00d78329149","observation_id":"7f0d3e58-9117-4832-aaf3-a44fbb47e16a","resolution":{"observed_at":"2026-08-07T12:48:22.602217Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:22.359276Z","title":null,"venue":null,"work_id":"498cbc64-b209-47f0-8217-18c5a7c2e7e2","year":2011},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:13.800757Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:33c1c790dc9293b7faf4b662cc41ba31dd2c5bc2974257564b82b5c7f67817bb","observation_id":"6c4d0816-2c71-469b-bb88-a39f1fa50420","resolution":{"observed_at":"2026-08-07T12:48:22.432778Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19334","last_updated":"2024-06-03T16:19:03Z","snapshot_observed_at":"2026-07-06T17:37:34.047076Z","submitted_at":"2024-02-29T16:37:08Z","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19334","snapshot_observed_at":"2026-08-07T12:48:13.899297Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:13.899297Z"},"links":{"cited_paper":"/paper/2402.19334","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:42d3d7bb0a4eef01135bba77a2f430493313d1e137dac18d228662157d7058d5","observation_id":"2e46fb92-cefd-48cc-8bfd-7d876c7b60af","resolution":{"observed_at":"2026-08-07T12:48:13.899297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-07T12:48:13.986300Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:13.986300Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:2cd4ffd1f55631209b318f1f78a5f083a817b06bb6be4beeb499d69bd8272c4c","observation_id":"4c8b477c-832f-41a1-8450-47c8e09715fd","resolution":{"observed_at":"2026-08-07T12:48:13.986300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.02467","last_updated":"2021-10-06T02:48:58Z","snapshot_observed_at":"2026-08-03T22:36:07.737567Z","submitted_at":"2021-10-06T02:48:58Z","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.02467","snapshot_observed_at":"2026-08-07T12:48:14.057301Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.057301Z"},"links":{"cited_paper":"/paper/2110.02467","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:d13de6b7d2eab64b7dbc9abb1f0aa2f731cd38bbaabf4e708121b676170dc483","observation_id":"6acf0a50-fd6e-4657-b3af-d64b733adaa9","resolution":{"observed_at":"2026-08-07T12:48:14.057301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14168","last_updated":"2021-11-18T00:23:45Z","snapshot_observed_at":"2026-08-07T01:45:38.840969Z","submitted_at":"2021-10-27T04:49:45Z","title":"Training Verifiers to Solve Math Word Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14168","snapshot_observed_at":"2026-08-07T12:48:14.163455Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.163455Z"},"links":{"cited_paper":"/paper/2110.14168","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:01ae00d21db4b49a79663293c82e87d435549a993eeb53efa9cdc47afe1e0d2f","observation_id":"122aca9f-7cbc-436a-a84d-7f5432689998","resolution":{"observed_at":"2026-08-07T12:48:14.163455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:22.217754Z","title":null,"venue":null,"work_id":"343844c8-bb73-4d9c-adb7-7a95f4b0171c","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.242518Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:89c7d4ca1830978a65324e8fd4e015681c9d41dcabae6656de8359ea1f39567d","observation_id":"797edc12-481f-4f6d-ad2f-9df398226fc8","resolution":{"observed_at":"2026-08-07T12:48:22.273813Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.11617","last_updated":"2024-06-17T15:02:45Z","snapshot_observed_at":"2026-08-04T01:52:39.302319Z","submitted_at":"2024-06-17T15:02:45Z","title":"DELLA-Merging: Reducing Interference in Model Merging through Magnitude-Based Sampling","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.11617","snapshot_observed_at":"2026-08-07T12:48:14.350555Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.350555Z"},"links":{"cited_paper":"/paper/2406.11617","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:9ed9d9d1058bcb9db98d6bb7353467dc37e2320b1fe6978ca3dc620b0fa8dde6","observation_id":"c8b8ca49-82e1-44e6-96e1-bcd6d9cfcfbc","resolution":{"observed_at":"2026-08-07T12:48:14.350555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:21.959656Z","title":null,"venue":null,"work_id":"96b1d8de-23cd-4c0f-ae8b-83ab243b129b","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.461049Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:b2d8bac667d5a9406d51fae0c7cf9192dd9b606eb3eab31951a5111b2accc873","observation_id":"70c6f83e-680c-4fee-a741-650da0bf8f12","resolution":{"observed_at":"2026-08-07T12:48:22.040158Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:21.664427Z","title":null,"venue":null,"work_id":"fce7e0bb-bd0f-4a6f-ac64-eeb1780ba68b","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.525259Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:23abefd0d15721d78c2cd61403fca161d45a23c61f8f3b4ad256c1bd3847f32f","observation_id":"83e96470-e45e-45ac-9790-37df9915383d","resolution":{"observed_at":"2026-08-07T12:48:21.827998Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T12:48:14.631580Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.631580Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:2acdc3b8179778397653c43702684cc103b0caf7f80142eaed58ee7c4de0ef4f","observation_id":"60284a90-ff1a-485d-a879-a944b35ab9cb","resolution":{"observed_at":"2026-08-07T12:48:14.631580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03251","last_updated":"2023-02-19T01:32:21Z","snapshot_observed_at":"2026-07-06T14:49:07.867567Z","submitted_at":"2023-02-07T04:33:41Z","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03251","snapshot_observed_at":"2026-08-07T12:48:14.724774Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.724774Z"},"links":{"cited_paper":"/paper/2302.03251","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:9ccfa4c1c0e7af8a93d5199b23068814b542be2fcebde2724cbd486cb5c45fbc","observation_id":"b3c169b7-3ea2-4a6c-96b8-fb5787742296","resolution":{"observed_at":"2026-08-07T12:48:14.724774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.07676","last_updated":"2024-03-30T16:09:34Z","snapshot_observed_at":"2026-07-06T16:31:21.196640Z","submitted_at":"2023-10-11T17:21:03Z","title":"Composite Backdoor Attacks Against Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.07676","snapshot_observed_at":"2026-08-07T12:48:14.815514Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.815514Z"},"links":{"cited_paper":"/paper/2310.07676","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:465662c02bf950afe98cae07fafe6d6c87a5d7525d365066d0f4502718291809","observation_id":"7bab8c33-e09a-4ba8-a0fb-3c811ac4d076","resolution":{"observed_at":"2026-08-07T12:48:14.815514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.15062","last_updated":"2023-10-14T02:14:51Z","snapshot_observed_at":"2026-07-06T15:32:25.931739Z","submitted_at":"2023-05-24T11:52:07Z","title":"Lawyer LLaMA Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.15062","snapshot_observed_at":"2026-08-07T12:48:14.903159Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.903159Z"},"links":{"cited_paper":"/paper/2305.15062","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:b8d4cea0a1f429c6f4404aa5c013a30a626cd3e90b99d2928131eed17a812cb3","observation_id":"79c1b52f-28ef-4ebe-b102-724fe08128d2","resolution":{"observed_at":"2026-08-07T12:48:14.903159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.04089","last_updated":"2023-03-31T15:27:01Z","snapshot_observed_at":"2026-08-03T22:12:27.993418Z","submitted_at":"2022-12-08T05:50:53Z","title":"Editing Models with Task Arithmetic","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.04089","snapshot_observed_at":"2026-08-07T12:48:14.987844Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.987844Z"},"links":{"cited_paper":"/paper/2212.04089","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:7fd4071acacf495fc1ed7989b0f246376316b9ab172954fabc3ecd645a0f577f","observation_id":"36ccc6a4-8b7a-4f57-9820-8c94decb7d5b","resolution":{"observed_at":"2026-08-07T12:48:14.987844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-07T12:48:15.086856Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.086856Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:16b7df95f27e56f893da6e920f696e6a932a0f9dd651922d056876273c2aef6b","observation_id":"8fd8d335-7d11-454b-8c7b-c03785fead1b","resolution":{"observed_at":"2026-08-07T12:48:15.086856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:21.360436Z","title":null,"venue":null,"work_id":"c6ef4da8-b43d-4e8c-af7e-d3b101b92e17","year":2022},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.178603Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:56f23af5ead9b838a69577c8870f1ec872d45f4f947a471010ea125667eed0e8","observation_id":"83528510-2044-476a-aa85-25eeaebd8dea","resolution":{"observed_at":"2026-08-07T12:48:21.472996Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-07T12:48:15.244085Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.244085Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:81545372806453702a6786cc9cbb52a06f3816b13f11ace36b2600a51d171aa8","observation_id":"450d7339-62b7-46c8-a576-d70a1c294c73","resolution":{"observed_at":"2026-08-07T12:48:15.244085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12257","last_updated":"2025-03-27T16:21:02Z","snapshot_observed_at":"2026-08-03T19:31:04.335334Z","submitted_at":"2024-06-18T04:10:38Z","title":"CleanGen: Mitigating Backdoor Attacks for Generation Tasks in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12257","snapshot_observed_at":"2026-08-07T12:48:15.362800Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.362800Z"},"links":{"cited_paper":"/paper/2406.12257","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:e66c3c3a4c6e63a03d83b589f7e506ada74a8c1e47832d550c4d3f9fc63c4d5e","observation_id":"912b481f-c6ec-4061-95b4-ef63f4ff0f8c","resolution":{"observed_at":"2026-08-07T12:48:15.362800Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.07814","last_updated":"2022-02-08T23:16:31Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-02-08T23:16:31Z","title":"Competition-Level Code Generation with AlphaCode","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.07814","snapshot_observed_at":"2026-08-07T12:48:15.436062Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.436062Z"},"links":{"cited_paper":"/paper/2203.07814","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:017d9fd1774b01834989862e8989d8a7ee70a68bec2b8ce6df84da2fd979ce22","observation_id":"32040036-1434-4e38-8918-f5dd16937f89","resolution":{"observed_at":"2026-08-07T12:48:15.436062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.00108","last_updated":"2025-04-30T22:51:42Z","snapshot_observed_at":"2026-07-06T17:37:44.114370Z","submitted_at":"2024-02-29T20:25:16Z","title":"LoRATK: LoRA Once, Backdoor Everywhere in the Share-and-Play Ecosystem","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.00108","snapshot_observed_at":"2026-08-07T12:48:15.563187Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.563187Z"},"links":{"cited_paper":"/paper/2403.00108","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:4d93cbe0af27c775e4939005e054efc5d725ad8d113502b80fdcbfeb62182dc0","observation_id":"9183bd86-2785-44ee-a794-60d21b3f351b","resolution":{"observed_at":"2026-08-07T12:48:15.563187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:21.034397Z","title":null,"venue":null,"work_id":"576d420e-421a-45c8-8676-26361079fde6","year":2018},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.621816Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:ccf7e926ad872b5513c1d9f201162ba911bcc25359e37b5a965aff027f8e5415","observation_id":"4276fcd2-08a7-4e5a-869f-48d675dbf236","resolution":{"observed_at":"2026-08-07T12:48:21.174769Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.787022Z","title":null,"venue":null,"work_id":"ecf717ba-f530-4f19-8d03-c9f4a24e5a90","year":2018},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.715639Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:371e6bba02532003f602dc59bdcdf8897cda9dd74233eaadcb0e4bf372ba3307","observation_id":"c1b6bdf9-bdf5-4b8f-a228-b64a77d1812e","resolution":{"observed_at":"2026-08-07T12:48:20.938528Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10047","last_updated":"2023-10-16T04:11:19Z","snapshot_observed_at":"2026-07-06T16:33:30.170449Z","submitted_at":"2023-10-16T04:11:19Z","title":"Improving Large Language Model Fine-tuning for Solving Math Problems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10047","snapshot_observed_at":"2026-08-07T12:48:15.805007Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.805007Z"},"links":{"cited_paper":"/paper/2310.10047","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:7c418355f2e41d60e9938e104c340cc808195b9f7d0f1330841cb112328abcd0","observation_id":"15c53ae5-6c1d-4a3c-adfe-4dd50ec74692","resolution":{"observed_at":"2026-08-07T12:48:15.805007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.622481Z","title":null,"venue":null,"work_id":"c1e435af-862e-492d-9e6f-cb0d8bc6ee2c","year":2011},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.891571Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:caef0c4f53b650bef211763d62f8ee1396cdb1695e0b9987cedd04f66b4a997b","observation_id":"cbec3f81-1507-4073-b573-03260797374c","resolution":{"observed_at":"2026-08-07T12:48:20.718390Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.469533Z","title":null,"venue":null,"work_id":"4c75861c-4865-426f-bc2d-c2e7fcdd8af2","year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.965811Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:dc6264a9c26ff7e573cd3c8af7a21c7f4e5d187b2332101f04c2362df604386c","observation_id":"0a5def35-8596-4b5b-a987-b8b146215fd2","resolution":{"observed_at":"2026-08-07T12:48:20.534988Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.12400","last_updated":"2021-06-03T08:27:11Z","snapshot_observed_at":"2026-08-07T23:25:30.813753Z","submitted_at":"2021-05-26T08:54:19Z","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.12400","snapshot_observed_at":"2026-08-07T12:48:16.087638Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.087638Z"},"links":{"cited_paper":"/paper/2105.12400","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:996ce8ba7677faaf0fce76b9e2dfdc0749071c43c1848b406bad27c5fee1028d","observation_id":"d28e90b0-fba3-4e07-a033-1a758f9d6c28","resolution":{"observed_at":"2026-08-07T12:48:16.087638Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:16.192239Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.192239Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:292037fb84677b90edf21597a7c19c54d2861eefbc04faf344ffcd0887f1550a","observation_id":"f8f4b374-06fb-4c64-9209-d88f499887f4","resolution":{"observed_at":"2026-08-07T12:48:16.192239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.308958Z","title":null,"venue":null,"work_id":"ad0959bc-4a4c-4974-86c9-c3d2986ba57b","year":2019},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.270706Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:82a08fb3f99684b5b1e80a9a3da0b1d3dac2327952f6951d139df65ddf913d77","observation_id":"87e2d3cd-b5a2-4fb9-a928-9106961aa022","resolution":{"observed_at":"2026-08-07T12:48:20.370283Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.00197","last_updated":"2021-10-30T07:11:24Z","snapshot_observed_at":"2026-07-06T12:03:42.294180Z","submitted_at":"2021-10-30T07:11:24Z","title":"Backdoor Pre-trained Models Can Transfer to All","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.00197","snapshot_observed_at":"2026-08-07T12:48:16.387648Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.387648Z"},"links":{"cited_paper":"/paper/2111.00197","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:52ce5db5037cc241afaf7a517def397dd74f60bca5c3f9f73b2db15d96308004","observation_id":"54c745f4-3050-477b-8068-f03bf4ceca12","resolution":{"observed_at":"2026-08-07T12:48:16.387648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.12298","last_updated":"2023-02-21T08:59:22Z","snapshot_observed_at":"2026-07-06T15:19:28.033750Z","submitted_at":"2023-02-21T08:59:22Z","title":"BadGPT: Exploring Security Vulnerabilities of ChatGPT via Backdoor Attacks to InstructGPT","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.12298","snapshot_observed_at":"2026-08-07T12:48:16.463357Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.463357Z"},"links":{"cited_paper":"/paper/2304.12298","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:e635a69bca11619c2f6c512758c959919411e5a907927ab36e54835a9384e904","observation_id":"efce6e4a-a467-4b81-ba43-4873f940c9e4","resolution":{"observed_at":"2026-08-07T12:48:16.463357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.16176","last_updated":"2021-01-15T14:07:09Z","snapshot_observed_at":"2026-08-03T13:00:31.280749Z","submitted_at":"2020-06-29T16:40:14Z","title":"Natural Backdoor Attack on Text Data","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.16176","snapshot_observed_at":"2026-08-07T12:48:16.564496Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.564496Z"},"links":{"cited_paper":"/paper/2006.16176","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:5879908ffbb74dc192d48b96ddf8b2a57103233a9598c2e1d287ba5198ce4e38","observation_id":"94678c49-a97c-4893-a29e-7625c3932f6c","resolution":{"observed_at":"2026-08-07T12:48:16.564496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:16.682266Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.682266Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:00f485b2c8552445e2a71d0cab93dfd2de6fd90bf033f21ec4b19f838901596c","observation_id":"8f37c53e-4e42-4872-8ad7-8768f1cbb690","resolution":{"observed_at":"2026-08-07T12:48:16.682266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.06072","last_updated":"2025-08-01T01:52:05Z","snapshot_observed_at":"2026-08-07T17:20:39.665338Z","submitted_at":"2025-03-08T05:41:42Z","title":"A Survey on Post-training of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.06072","snapshot_observed_at":"2026-08-07T12:48:16.796706Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.796706Z"},"links":{"cited_paper":"/paper/2503.06072","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:546b63057529a3c01ea99c18203c0b6343068d3f23617a78be0b9f632476eb31","observation_id":"bb41e4cd-3760-4d38-bda8-7dbc1c2cf741","resolution":{"observed_at":"2026-08-07T12:48:16.796706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.01560","last_updated":"2024-10-05T03:54:22Z","snapshot_observed_at":"2026-07-06T19:26:02.193680Z","submitted_at":"2024-10-02T14:00:09Z","title":"OpenMathInstruct-2: Accelerating AI for Math with Massive Open-Source Instruction Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.01560","snapshot_observed_at":"2026-08-07T12:48:16.930344Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.930344Z"},"links":{"cited_paper":"/paper/2410.01560","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:0e86156d25f7e144079c68d519832ef79f26d82824ae774d48429743c76fbfc9","observation_id":"b5a90ace-7812-4599-8dfd-9454d2acda22","resolution":{"observed_at":"2026-08-07T12:48:16.930344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.113034Z","title":null,"venue":null,"work_id":"b308649f-95eb-43cc-8f73-6cab48db70a9","year":2018},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.989693Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:9fbf3dade59f40fe9b36f9a8d1abdbede459b8b6dc39f693433ad1b361449c15","observation_id":"410606ef-b8cb-4e68-9396-c3383456b174","resolution":{"observed_at":"2026-08-07T12:48:20.192074Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T12:48:17.082771Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.082771Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:67796b7edd9da7cb86ea1318be5c7c28d05b73206b4e66b3fc58f1a658dd9ee6","observation_id":"06bd2291-f7f5-40c6-b46f-44af44752bf4","resolution":{"observed_at":"2026-08-07T12:48:17.082771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:19.945497Z","title":null,"venue":null,"work_id":"7c2daf9d-6ca8-48f1-beec-f091946b8ee4","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.190393Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:3c343bb0749b99d46c21a687a9543ef8fdecfa74ee4e8ff8be3a1058413552d8","observation_id":"b3b8316c-34af-4bf1-8997-0cf804b4ed73","resolution":{"observed_at":"2026-08-07T12:48:20.038255Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.07666","last_updated":"2025-12-31T04:06:49Z","snapshot_observed_at":"2026-08-07T23:28:24.025478Z","submitted_at":"2024-08-14T16:58:48Z","title":"Model Merging in LLMs, MLLMs, and Beyond: Methods, Theories, Applications and Opportunities","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.07666","snapshot_observed_at":"2026-08-07T12:48:17.286060Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.286060Z"},"links":{"cited_paper":"/paper/2408.07666","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:2c2a08788584d912130f6b264a559f08cb0c4c00835da1e2646f13b808546630","observation_id":"40d570c1-83d7-445c-a17a-f11a18c32c15","resolution":{"observed_at":"2026-08-07T12:48:17.286060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.16746","last_updated":"2025-05-30T16:45:30Z","snapshot_observed_at":"2026-07-06T19:56:48.086175Z","submitted_at":"2024-11-23T20:41:24Z","title":"LoBAM: LoRA-Based Backdoor Attack on Model Merging","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.16746","snapshot_observed_at":"2026-08-07T12:48:17.381752Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.381752Z"},"links":{"cited_paper":"/paper/2411.16746","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:0ab236e54079664e393d283a7e5a5dbbb5e34830abaa3e3fe4b82982b626a66c","observation_id":"d41db963-ae11-4a02-8fde-67a7f7aeec66","resolution":{"observed_at":"2026-08-07T12:48:17.381752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:19.778025Z","title":null,"venue":null,"work_id":"81f663fe-c69e-47b6-ac84-217e8cd57f8b","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.472251Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:8e88d118182071e766bb52bf236740d33ee76dcdfb01c3b7e5fcb0dd66186255","observation_id":"f58c5256-928a-4900-b765-b2a2ddaf0623","resolution":{"observed_at":"2026-08-07T12:48:19.866248Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:17.522018Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.522018Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:4726e3ac80703a126ea7f4d94afb050c20bb91332d2b0d9a4926e596cc0e6a6a","observation_id":"e021420d-0969-4ad8-92b9-c4ecd9881c5c","resolution":{"observed_at":"2026-08-07T12:48:17.522018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.09360","last_updated":"2023-02-23T11:44:02Z","snapshot_observed_at":"2026-07-06T14:53:16.135982Z","submitted_at":"2023-02-18T15:04:42Z","title":"Backdoor Attacks to Pre-trained Unified Foundation Models","version":3},"cited_work":{"arxiv_id":"2302.09360","doi":null,"metadata_source":"pith","pith_arxiv_id":"2302.09360","snapshot_observed_at":"2026-08-07T12:48:18.694219Z","title":"Backdoor Attacks to Pre-trained Unified Foundation Models","venue":"cs.CR","work_id":"b6c17ba0-37a1-4e04-9cbc-970c1f325ea4","year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.530699Z"},"links":{"cited_paper":"/paper/2302.09360","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:65f172add6e9c011c7482b2c6e44e46b5f1b643d242d4aeb01dbfe9c14a3204f","observation_id":"e8e11dcf-316f-4a1c-beeb-e7ed34875fd1","resolution":{"observed_at":"2026-08-07T12:48:18.802405Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16023","last_updated":"2025-03-20T10:39:51Z","snapshot_observed_at":"2026-08-07T16:49:32.986624Z","submitted_at":"2025-03-20T10:39:51Z","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","version":1},"cited_work":{"arxiv_id":"2503.16023","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.16023","snapshot_observed_at":"2026-08-07T12:48:18.515202Z","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","venue":"cs.CR","work_id":"7266043c-a062-4bc9-bb06-2fde1d9e1e3c","year":2025},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.634556Z"},"links":{"cited_paper":"/paper/2503.16023","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:d31b00fb89316684d857624242c096f3a5d18e985e67f629e240faef55ca5484","observation_id":"5bc63c3d-ca04-4b37-a019-6d0c8586e2e4","resolution":{"observed_at":"2026-08-07T12:48:18.598405Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:19.588709Z","title":null,"venue":null,"work_id":"72428244-ab77-4b8c-b2a3-44ae2863b917","year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.743822Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:5953a821ff6b8d7507c2a0d88fb16df64c18a10e173c1b167e79482384e21d27","observation_id":"b9c159d5-f586-40b6-bac1-4eaa004b529e","resolution":{"observed_at":"2026-08-07T12:48:19.673919Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:19.271153Z","title":null,"venue":null,"work_id":"23c42a02-9a4c-4715-b04f-980c585fa2ec","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.945186Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:394f5f0a5ffaa9393307182c926f4237e50c8073ab3b95e122fe0cbd4444a08e","observation_id":"aab23a1c-03bc-44ac-95ce-cef3c6e453a7","resolution":{"observed_at":"2026-08-07T12:48:19.435511Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:18.124491Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:18.124491Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:2c33a30a94cfc85371ecdcd518fe867339a1acde0824c4188cb8900ad4d9e952","observation_id":"7ccd69a6-3948-4348-846b-b6b1ad5df634","resolution":{"observed_at":"2026-08-07T12:48:18.124491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:18.187357Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:18.187357Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:6f2cc3ef91b2440781749004e24ea70d43abc70551ee6d5f1bf9c5c7f1a663e1","observation_id":"37612cec-ca52-40cc-ae6f-810bc7c7e8ac","resolution":{"observed_at":"2026-08-07T12:48:18.187357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:18.290076Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:18.290076Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:7d97015f2935c0127e7b24645d42ccc1433472a3c6215d787895694b50a5f0f2","observation_id":"01995b97-26fe-470a-b7a2-684d3b70c197","resolution":{"observed_at":"2026-08-07T12:48:18.290076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:18.371254Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:18.371254Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:23d9c403c4d67d56b86007ce7942f5d62bf9784ffe9de4987a23c03d1814c714","observation_id":"899eec16-0269-495c-a375-8e4d0cdf62fd","resolution":{"observed_at":"2026-08-07T12:48:18.371254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T12:41:02.736594Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":48,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 2 inbound Pith citation observations for arXiv:2505.23561."}