{"as_of":"2026-08-08T11:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2d16032e5db29763caf0f8f8963cb191b4b161685a273ddf17a81a17f9bb3abf","coverage":[{"denominator":53,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":53,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:59:34.901448Z","state":"measured"},{"denominator":54,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":54,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-22T22:27:18.533162Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"cited_work":{"arxiv_id":"2506.06518","doi":"10.48550/arxiv.2506.06518","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.06518","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A systematic review of poisoning attacks against large language models","venue":"ArXiv.org","work_id":"11b63bad-66e8-4266-a1e8-3d8a981b5562","year":2025},"citing_paper":{"arxiv_id":"2504.00446","last_updated":"2026-04-05T08:03:35Z","snapshot_observed_at":"2026-08-04T21:32:00.757719Z","submitted_at":"2025-04-01T05:58:14Z","title":"Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-22T22:27:18.533162Z"},"links":{"cited_paper":"/paper/2506.06518","citing_paper":"/paper/2504.00446"},"observation_digest":"sha256:e4f88def7c29b7f7f260a609ea03a9e2738d3ee2996a1b24d474955e850ce883","observation_id":"8b417431-01a7-41f4-84dc-613f5bc84dbb","resolution":{"observed_at":"2026-05-22T22:32:12.116278Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.06518/citation-record","integrity":"/paper/2506.06518/integrity","json":"/paper/2506.06518/citation-record.json","paper":"/paper/2506.06518"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2404.05530","last_updated":"2024-08-06T14:30:31Z","snapshot_observed_at":"2026-07-06T17:57:10.984994Z","submitted_at":"2024-04-08T13:59:02Z","title":"Best-of-Venom: Attacking RLHF by Injecting Poisoned Preference Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.05530","snapshot_observed_at":"2026-08-07T05:59:31.659055Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:31.659055Z"},"links":{"cited_paper":"/paper/2404.05530","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:6d92ebbc223c025dba09e65bd9eefc58634b0accb4451f51b0d0d37f90603750","observation_id":"7ea8583f-01ce-43e0-8962-3952464ac255","resolution":{"observed_at":"2026-08-07T05:59:31.659055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15662","last_updated":"2024-05-24T15:59:17Z","snapshot_observed_at":"2026-07-06T18:19:25.869339Z","submitted_at":"2024-05-24T15:59:17Z","title":"Class Machine Unlearning for Complex Data via Concepts Inference and Data Poisoning","version":1},"cited_work":{"arxiv_id":"2405.15662","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.15662","snapshot_observed_at":"2026-08-07T05:59:36.257940Z","title":"Class Machine Unlearning for Complex Data via Concepts Inference and Data Poisoning","venue":"cs.LG","work_id":"65991914-d6c7-4aa3-997f-1f32349987e6","year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:31.836361Z"},"links":{"cited_paper":"/paper/2405.15662","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:bf206d351f5ea98615c2d79932b38d75ab9f9b4bb2771cf8fe5e47e1218fc18b","observation_id":"446d851b-e08b-42ad-8818-a4bbead9f097","resolution":{"observed_at":"2026-08-07T05:59:36.320174Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:39.286163Z","title":"Wei Du, TongXin Yuan, HaoDong Zhao, and GongShen Liu","venue":null,"work_id":"761b5a56-e302-47b6-849f-9ba0cb1f9b67","year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:31.998778Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:7d510699b8e0275bc0873f3dedaeaa65c53cced6ffae52246aafc525c466f5be","observation_id":"3e1a0082-6fb0-4374-b66d-749cc0dd9232","resolution":{"observed_at":"2026-08-07T05:59:39.352361Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:39.165869Z","title":"InProceedings of the 2022 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies","venue":null,"work_id":"734085f0-13e7-4f83-b76d-e81df29d9d7e","year":2022},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.012412Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:ff3600003b5818d4ce4ae4795ff5086f92c395f004e9ddc01b45fdce73fa4174","observation_id":"070d47d6-8848-4383-899e-b98f53124a14","resolution":{"observed_at":"2026-08-07T05:59:39.227506Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:39.011961Z","title":"Samuel Gehman, Suchin Gururangan, Maarten Sap, Yejin Choi, and Noah A Smith","venue":null,"work_id":"f16850a6-a652-4671-8593-7e893c7318a3","year":2021},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.030481Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:647260d70ec4e9ff4d1f4d09c9d87a6d06433e53be9a6ddb07b27796d40630cd","observation_id":"cdf50981-1720-475d-b51c-9bee26e73acf","resolution":{"observed_at":"2026-08-07T05:59:39.100234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:38.871372Z","title":"Naibin Gu, Peng Fu, Xiyu Liu, Zhengxiao Liu, Zheng Lin, and Weiping Wang","venue":null,"work_id":"5c197002-2c93-4de5-be49-e4a571441d0a","year":2022},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.048322Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:e779ebf45634163d00eeb343dd4405980515a3f3b67c8a501e5666152c4caf2a","observation_id":"15e1017b-7498-4b48-ab4b-8e7c1dcef5c5","resolution":{"observed_at":"2026-08-07T05:59:38.956298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T05:59:32.069364Z","title":"Braden Hancock, Antoine Bordes, Pierre-Emmanuel Mazare, and Jason Weston","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.069364Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:953570221f7805526d7ae87f39b079eceafc086de8ca101577ca4fff1943acac","observation_id":"1ac792c8-74f8-4781-a2a5-c1bb955fcf16","resolution":{"observed_at":"2026-08-07T05:59:32.069364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.04366","last_updated":"2022-02-02T16:39:23Z","snapshot_observed_at":"2026-08-08T06:15:11.222260Z","submitted_at":"2021-10-08T20:22:26Z","title":"Towards a Unified View of Parameter-Efficient Transfer Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.04366","snapshot_observed_at":"2026-08-07T05:59:32.105612Z","title":"Xinyu He, Fengrui Hao, Tianlong Gu, and Liang Chang","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.105612Z"},"links":{"cited_paper":"/paper/2110.04366","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:7f032d2e714cd349650d4f7e2842db3a86639cb278f2aa7cafbbd452ebd6e4a6","observation_id":"1ff8c840-e0e0-4426-a12c-dd372f201e70","resolution":{"observed_at":"2026-08-07T05:59:32.105612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:38.626498Z","title":null,"venue":null,"work_id":"eb730473-0e23-49f7-8303-d93570c70f44","year":2023},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.126215Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:79ec740cc749c5ab1780a6715ca50bcbbe83412c3ec4858af4c574aba9ca30f7","observation_id":"9e37876d-a727-431d-9633-37f2d4cfcfff","resolution":{"observed_at":"2026-08-07T05:59:38.674627Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05566","last_updated":"2024-01-17T20:26:01Z","snapshot_observed_at":"2026-07-06T17:14:03.152949Z","submitted_at":"2024-01-10T22:14:35Z","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05566","snapshot_observed_at":"2026-08-07T05:59:32.171756Z","title":"Aftab Hussain, Md Rafiqul Islam Rabin, and Mohammad Amin Alipour","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.171756Z"},"links":{"cited_paper":"/paper/2401.05566","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:9cbbe892509d993d7e2520347f734b46a452be90d1f482ad74df60cc89aa0f14","observation_id":"4c84d963-2b0d-45c1-9bcf-fb539a8330c4","resolution":{"observed_at":"2026-08-07T05:59:32.171756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12281","last_updated":"2024-07-18T05:52:35Z","snapshot_observed_at":"2026-07-06T18:47:33.863041Z","submitted_at":"2024-07-17T03:02:15Z","title":"Turning Generative Models Degenerate: The Power of Data Poisoning Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12281","snapshot_observed_at":"2026-08-07T05:59:32.236884Z","title":"Keita Kurita, Paul Michel, and Graham Neubig","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.236884Z"},"links":{"cited_paper":"/paper/2407.12281","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:3ca507aea1e3af374d326580a3f048c66865e10a170cd09dd1382cabbede1bf5","observation_id":"8849ca2f-e013-46f3-b864-1cee1b6a3e8f","resolution":{"observed_at":"2026-08-07T05:59:32.236884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.13461","last_updated":"2019-10-29T18:01:00Z","snapshot_observed_at":"2026-07-06T08:33:12.534026Z","submitted_at":"2019-10-29T18:01:00Z","title":"BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehension","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.13461","snapshot_observed_at":"2026-08-07T05:59:32.272287Z","title":"arXiv:1910.13461 http://arxiv.org/abs/1910.13461 Jia Li, Zhuo Li, Huangzhao Zhang, Ge Li, Zhi Jin, Xing Hu, and Xin Xia","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.272287Z"},"links":{"cited_paper":"/paper/1910.13461","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:790df656b87457c0f366db932f7d44bfe3a76207b4ffffcce8bb39227f9517b4","observation_id":"9cb10e3b-957c-42e8-bb60-0bc8b8178b0d","resolution":{"observed_at":"2026-08-07T05:59:32.272287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.17029","last_updated":"2022-10-31T03:06:40Z","snapshot_observed_at":"2026-08-07T04:34:20.898066Z","submitted_at":"2022-10-31T03:06:40Z","title":"Poison Attack and Defense on Deep Source Code Processing Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.17029","snapshot_observed_at":"2026-08-07T05:59:32.310419Z","title":"Jiazhao Li, Yijin Yang, Zhuofeng Wu, VG Vydiswaran, and Chaowei Xiao","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.310419Z"},"links":{"cited_paper":"/paper/2210.17029","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:5db13d11f39f9ab79d3d9af8d24cba8289bbf4f39715235cd071d53278c15268","observation_id":"211096e0-83fc-4717-b080-ae9342540dd8","resolution":{"observed_at":"2026-08-07T05:59:32.310419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:38.476898Z","title":"InProceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","venue":null,"work_id":"603f84cc-b2bc-4db3-bf5d-f7d94b9e970d","year":2021},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.368731Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:d2ee2b441a9bab587c75a1f232361648de2bb535df9a090f17722801600f10e9","observation_id":"44cee96a-dca9-4a79-986f-339f69a7799e","resolution":{"observed_at":"2026-08-07T05:59:38.563879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1909.02742","last_updated":"2020-08-31T04:14:46Z","snapshot_observed_at":"2026-07-06T08:19:36.986334Z","submitted_at":"2019-09-06T07:11:26Z","title":"Invisible Backdoor Attacks on Deep Neural Networks via Steganography and Regularization","version":3},"cited_work":{"arxiv_id":"1909.02742","doi":null,"metadata_source":"pith","pith_arxiv_id":"1909.02742","snapshot_observed_at":"2026-08-07T05:59:36.008804Z","title":"Invisible Backdoor Attacks on Deep Neural Networks via Steganography and Regularization","venue":"cs.CR","work_id":"a3916338-d5a8-4267-af20-ba19e6cd6db8","year":2019},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.408799Z"},"links":{"cited_paper":"/paper/1909.02742","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:2b9837da689fc6d2b4fca7f55d94304a6937d2de6d17bfbce0a567a77b746886","observation_id":"5bc1a327-a310-469a-acf2-cc626cde87b2","resolution":{"observed_at":"2026-08-07T05:59:36.097011Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.11587","last_updated":"2024-08-21T12:50:23Z","snapshot_observed_at":"2026-07-06T19:04:00.888268Z","submitted_at":"2024-08-21T12:50:23Z","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","version":1},"cited_work":{"arxiv_id":"2408.11587","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.11587","snapshot_observed_at":"2026-08-07T05:59:35.822351Z","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","venue":"cs.CL","work_id":"c3471473-259a-4a4c-8321-0022d4edb3df","year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.492398Z"},"links":{"cited_paper":"/paper/2408.11587","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:4b141b08d74ff630be9251c883628d415a129311a957726a18cce200d5c23220","observation_id":"2de31235-aeef-41d5-8f74-38527e0e559b","resolution":{"observed_at":"2026-08-07T05:59:35.887725Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.00108","last_updated":"2025-04-30T22:51:42Z","snapshot_observed_at":"2026-07-06T17:37:44.114370Z","submitted_at":"2024-02-29T20:25:16Z","title":"LoRATK: LoRA Once, Backdoor Everywhere in the Share-and-Play Ecosystem","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.00108","snapshot_observed_at":"2026-08-07T05:59:32.537298Z","title":"Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.537298Z"},"links":{"cited_paper":"/paper/2403.00108","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:c7fa75fb21f745c8bdf78e9c725a5aba0b080710bc7904de7b46076d62b37d7b","observation_id":"822a5126-baa0-48ab-ba01-3c3c1b8d544c","resolution":{"observed_at":"2026-08-07T05:59:32.537298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.02242","last_updated":"2023-08-22T02:34:19Z","snapshot_observed_at":"2026-07-06T14:58:33.391195Z","submitted_at":"2023-03-03T22:19:22Z","title":"TrojText: Test-time Invisible Textual Trojan Insertion","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.02242","snapshot_observed_at":"2026-08-07T05:59:32.596342Z","title":"Tuan Anh Nguyen and Anh Tran","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.596342Z"},"links":{"cited_paper":"/paper/2303.02242","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:4b2ac55a00f72533f5ca778a2b298c468ff7bbd4f3fa567e89a11fd96f1a6298","observation_id":"ec6694a2-35fb-4077-b2dd-9af6fa42d624","resolution":{"observed_at":"2026-08-07T05:59:32.596342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:38.334884Z","title":"Long Ouyang, Jeffrey Wu, Xu Jiang, Diogo Almeida, Carroll Wainwright, Pamela Mishkin, Chong Zhang, Sandhini Agarwal, Katarina Slama, Alex Ray, et al","venue":null,"work_id":"8d75e90c-ece3-4e62-b482-628a9ece153d","year":2020},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.653375Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:237dc25bffdc17c5d8f4d8234b8eae6f966afd6e88ead291d93ed0eb03c71c96","observation_id":"cd321697-af2c-45a8-b287-130cebba843c","resolution":{"observed_at":"2026-08-07T05:59:38.400132Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:38.190359Z","title":"Sara Price, Arjun Panickssery, Sam Bowman, and Asa Cooper Stickland","venue":null,"work_id":"8ecd6abe-e098-43f4-99f1-ba3a01cae746","year":2022},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.698462Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:22d95ff8b9b29a6b8b5205ffc6946d7ef223c4e541ac31ebccaeb6dd5e8d8902","observation_id":"d2ec850a-57e3-4905-92a5-1f6af66bdfec","resolution":{"observed_at":"2026-08-07T05:59:38.284284Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.04108","last_updated":"2024-12-23T19:24:44Z","snapshot_observed_at":"2026-07-06T18:41:40.732196Z","submitted_at":"2024-07-04T18:24:09Z","title":"Future Events as Backdoor Triggers: Investigating Temporal Vulnerabilities in LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.04108","snapshot_observed_at":"2026-08-07T05:59:32.791087Z","title":"Fanchao Qi, Yangyi Chen, Mukai Li, Yuan Yao, Zhiyuan Liu, and Maosong Sun","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.791087Z"},"links":{"cited_paper":"/paper/2407.04108","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:544bf2465366e783aa734e91a4b06d6f56d98f3d73f394de7aa1a53bef233b16","observation_id":"84de39dd-b780-4c0d-b10f-1f44a4ce15f4","resolution":{"observed_at":"2026-08-07T05:59:32.791087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13459","last_updated":"2025-05-29T14:42:38Z","snapshot_observed_at":"2026-08-04T11:15:46.100317Z","submitted_at":"2024-02-21T01:30:03Z","title":"Learning to Poison Large Language Models for Downstream Manipulation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13459","snapshot_observed_at":"2026-08-07T05:59:32.918399Z","title":"Alec Radford, Jong Wook Kim, Chris Hallacy, Aditya Ramesh, Gabriel Goh, Sandhini Agarwal, Girish Sastry, Amanda Askell, Pamela Mishkin, Jack Clark, et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.918399Z"},"links":{"cited_paper":"/paper/2402.13459","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:c0781eb2f890366620b431c47cbb5f761b1fe1dc9b326d269651a04b8a226bfe","observation_id":"6e4b953e-9c90-4912-b65b-5dc0915554e8","resolution":{"observed_at":"2026-08-07T05:59:32.918399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:38.072452Z","title":"InICML 2021 Workshop on Adversarial Machine Learning","venue":null,"work_id":"32cd3a15-0a25-49a2-89dd-821e26e423d7","year":2021},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.037145Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:33ac6f338fa782c028b70845157c7339b05701abb38a5214c07d415da89b0c95","observation_id":"7a59d509-c94b-4087-a2b1-aebe2f772eb7","resolution":{"observed_at":"2026-08-07T05:59:38.116750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:37.941796Z","title":"InProceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","venue":null,"work_id":"ac3a0280-0671-4948-972a-bdfc133e9612","year":2021},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.204647Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:7b6a137b5e412c9c84f4bdb6dbfc4a626f80fca00e44e15e2d5b5e45e174e4da","observation_id":"f389ad9b-2812-452f-b6b3-e92ad2ea1166","resolution":{"observed_at":"2026-08-07T05:59:38.002463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:37.796881Z","title":"Zihao Tan, Qingliang Chen, Yongjian Huang, and Chen Liang","venue":null,"work_id":"46d93232-6a5e-421d-9cf8-ea09976dc8a2","year":2023},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.208356Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:ba9aa195bdc293f68507211e230cac9eb4e90822e3e11d8fcb9b06c6005ed2fe","observation_id":"c0fede6e-3234-411e-9424-c337b12e40d9","resolution":{"observed_at":"2026-08-07T05:59:37.873270Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:37.636680Z","title":"Apostol Vassilev, Alina Oprea, Alie Fordyce, and Hyrum Andersen","venue":null,"work_id":"d36ff512-2ad6-4373-9b89-944c7fc10345","year":2018},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.269475Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:ed654c51327b46150e41a4f39abb843cdbb286874d71ac3fb91539cedf172c00","observation_id":"22f4a58d-84af-4c16-81cc-fb1905e1c8f3","resolution":{"observed_at":"2026-08-07T05:59:37.730052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:33.333464Z","title":"https://doi.org/10.6028/NIST.AI.100-2e2023 Jordan Vice, Naveed Akhtar, Richard Hartley, and Ajmal Mian","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.333464Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:c1c0ee4bdd7dbaf74fade24785271e7ec8cc99468d25ae642d3147e1abb28988","observation_id":"0f114077-2cf1-468d-bb25-b2220928bd98","resolution":{"observed_at":"2026-08-07T05:59:33.333464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:37.526491Z","title":"Eric Wallace, Tony Z Zhao, Shi Feng, and Sameer Singh","venue":null,"work_id":"cf88484b-bb6c-46f6-bac6-8391fe1af94e","year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.460538Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:5d64e12d5aa548ca1abd291f8e011f2f4ab21e4522f2d2a69cd86e362876439f","observation_id":"c909ff97-12a1-41b9-a26a-e6862534f9e4","resolution":{"observed_at":"2026-08-07T05:59:37.592876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.12563","last_updated":"2021-04-12T09:10:06Z","snapshot_observed_at":"2026-07-06T10:07:57.849143Z","submitted_at":"2020-10-23T17:47:06Z","title":"Concealed Data Poisoning Attacks on NLP Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.12563","snapshot_observed_at":"2026-08-07T05:59:33.565741Z","title":"Matthew Walmer, Karan Sikka, Indranil Sur, Abhinav Shrivastava, and Susmit Jha","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.565741Z"},"links":{"cited_paper":"/paper/2010.12563","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:52914fb22aec233dbad555722e0a6e409eae5270dd72e9b97bf391dfb77b0a76","observation_id":"1b68074a-fca0-4a99-996a-a679b9349ffc","resolution":{"observed_at":"2026-08-07T05:59:33.565741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T05:59:33.685730Z","title":"InProceedings of the 2021 Conference on Empirical Methods in Natural Language Processing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.685730Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:306afd5c4bc878d29b2fd15cff947c08c5540aaf65f61a99f8213226666755d7","observation_id":"29ede7d0-14d3-4b61-9ae0-7f66260913e6","resolution":{"observed_at":"2026-08-07T05:59:33.685730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:37.333735Z","title":"InProceedings of the 2022 ACM Conference on Fairness, Accountability, and Transparency","venue":null,"work_id":"bfbcc3f9-3507-42d5-8277-219d8e194d55","year":2022},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.751321Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:b04a1d36c054b0ac5cf843433ced773a8f6d3564c8d1d026d45f44152145aca7","observation_id":"a64ed6ef-2aa6-4d4c-b04a-d63d529d550d","resolution":{"observed_at":"2026-08-07T05:59:37.421889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.01231","last_updated":"2024-04-01T16:50:54Z","snapshot_observed_at":"2026-07-06T17:54:03.923842Z","submitted_at":"2024-04-01T16:50:54Z","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.01231","snapshot_observed_at":"2026-08-07T05:59:33.836732Z","title":"Jason E Weston","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.836732Z"},"links":{"cited_paper":"/paper/2404.01231","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:77e3e87756739b58e391b7c76bb098fedcfd545f72ee9ac6a0a04002eccd935e","observation_id":"9e05af27-1a3e-4953-aa2b-6090027ce4e0","resolution":{"observed_at":"2026-08-07T05:59:33.836732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01364","last_updated":"2024-02-07T07:14:39Z","snapshot_observed_at":"2026-08-04T18:35:41.659861Z","submitted_at":"2024-02-02T12:34:09Z","title":"Continual Learning for Large Language Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01364","snapshot_observed_at":"2026-08-07T05:59:33.962759Z","title":"Yutong Wu, Jie Zhang, Florian Kerschbaum, and Tianwei Zhang","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.962759Z"},"links":{"cited_paper":"/paper/2402.01364","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:a48efb71d92960648781fe1ef2e60be34612df849e7cd76f2ebd5ce29f987a95","observation_id":"930d14a3-00b3-4f7d-934b-e96036f0b139","resolution":{"observed_at":"2026-08-07T05:59:33.962759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.10718","last_updated":"2023-08-23T13:56:52Z","snapshot_observed_at":"2026-07-31T14:37:50.657468Z","submitted_at":"2023-08-21T13:39:04Z","title":"Backdooring Textual Inversion for Concept Censorship","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.10718","snapshot_observed_at":"2026-08-07T05:59:34.070320Z","title":"Jiashu Xu, Mingyu Ma, Fei Wang, Chaowei Xiao, and Muhao Chen","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.070320Z"},"links":{"cited_paper":"/paper/2308.10718","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:284fd5b3c3e69c7c8861998f131f1e7cdaa14cccdb534c28059e28024d898a2f","observation_id":"e8ff8bbc-ac47-4260-a6e2-d3107a183f0d","resolution":{"observed_at":"2026-08-07T05:59:34.070320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:37.005392Z","title":"InProceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers)","venue":null,"work_id":"a58ffeb7-fd16-4a2e-b21b-37426b3aa7ae","year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.143192Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:3ecebb97804983d9511491605da1edc8107164ccf5b082396508ecbb70763ea1","observation_id":"3ab89a10-8cb4-4391-baed-9a7c104aca06","resolution":{"observed_at":"2026-08-07T05:59:37.075232Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.12700","last_updated":"2023-05-29T17:59:49Z","snapshot_observed_at":"2026-08-05T08:40:17.458197Z","submitted_at":"2022-05-25T11:58:38Z","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.12700","snapshot_observed_at":"2026-08-07T05:59:34.202693Z","title":"Jun Yan, Vikas Yadav, SHIYANG LI, Lichang Chen, Zheng Tang, Hai Wang, Vijay Srinivasan, Xiang Ren, and Hongxia Jin","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.202693Z"},"links":{"cited_paper":"/paper/2205.12700","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:687e96d6603bfb8d16ee0d2cd2305a18852efe6bad8401c1461a111dc7c7978c","observation_id":"0f65df34-05ce-449d-ac7d-288494e673a3","resolution":{"observed_at":"2026-08-07T05:59:34.202693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.07831","last_updated":"2021-10-15T03:09:26Z","snapshot_observed_at":"2026-07-06T11:58:08.615915Z","submitted_at":"2021-10-15T03:09:26Z","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.07831","snapshot_observed_at":"2026-08-07T05:59:34.294487Z","title":"Ziqing Yang, Michael Backes, Yang Zhang, and Ahmed Salem","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.294487Z"},"links":{"cited_paper":"/paper/2110.07831","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:7f22199fbdafe9179de568aaa3a5e9986729463c5ffa3a23420709f47092673c","observation_id":"b6ac111a-005d-4f9f-ab65-c9bf547ee782","resolution":{"observed_at":"2026-08-07T05:59:34.294487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.03160","last_updated":"2024-07-03T14:35:16Z","snapshot_observed_at":"2026-08-05T17:30:34.776829Z","submitted_at":"2024-07-03T14:35:16Z","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.03160","snapshot_observed_at":"2026-08-07T05:59:34.368760Z","title":"Wencong You, Zayd Hammoudeh, and Daniel Lowd","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.368760Z"},"links":{"cited_paper":"/paper/2407.03160","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:86360dcb53da723faa57dd9e413564a913ef982485fa6c72dd897ace6cb4aed3","observation_id":"78ff3513-3e31-407c-bcaa-78c9bd0e170e","resolution":{"observed_at":"2026-08-07T05:59:34.368760Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.18603","last_updated":"2023-10-28T06:11:07Z","snapshot_observed_at":"2026-08-08T00:29:58.457888Z","submitted_at":"2023-10-28T06:11:07Z","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","version":1},"cited_work":{"arxiv_id":"2310.18603","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.18603","snapshot_observed_at":"2026-08-07T05:59:35.285087Z","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","venue":"cs.LG","work_id":"5b61670a-72df-477f-a0ec-f0128d511830","year":2023},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.476469Z"},"links":{"cited_paper":"/paper/2310.18603","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:fa958bba8be3c98c09f0903447880a842cb1884fbaafb5c3847a51e5be9adec7","observation_id":"dfa8b74a-adbd-47a1-9b1f-2275984702d0","resolution":{"observed_at":"2026-08-07T05:59:35.378371Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.09545","last_updated":"2022-10-18T02:44:38Z","snapshot_observed_at":"2026-08-05T13:58:01.838826Z","submitted_at":"2022-10-18T02:44:38Z","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.09545","snapshot_observed_at":"2026-08-07T05:59:34.563333Z","title":"arXiv preprint arXiv:2210.09545(2022)","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.563333Z"},"links":{"cited_paper":"/paper/2210.09545","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:78ae42f11d62e297759fc3891bfb5c090763bd933ba1a0717db907599863e69d","observation_id":"66ceb03c-a844-4b5a-8429-cb423a7a5078","resolution":{"observed_at":"2026-08-07T05:59:34.563333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:36.806124Z","title":"Shuai Zhao, Luu Anh Tuan, Jie Fu, Jinming Wen, and Weiqi Luo","venue":null,"work_id":"d65be6b7-3da9-427e-a617-88bab5660b09","year":2023},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.642349Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:b1af8a55cde6b90bd4dfa7fb441592fc521f06f81c1516e233d91018bcfcf5c0","observation_id":"ff09d8fc-ab4e-402d-983d-6f9f098c06a8","resolution":{"observed_at":"2026-08-07T05:59:36.886731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:36.619576Z","title":"Mengxin Zheng, Jiaqi Xue, Xun Chen, YanShan Wang, Qian Lou, and Lei Jiang","venue":null,"work_id":"e1a1719c-263c-461e-9778-e06133d2c41a","year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.716903Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:d4adc9939ba1710be03eef2cf3bff56bc2df25360fd6b89c124a990cd5e13c0f","observation_id":"9030a4b2-37dd-4d34-8600-8def083d959f","resolution":{"observed_at":"2026-08-07T05:59:36.701027Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10467","last_updated":"2024-03-19T00:56:14Z","snapshot_observed_at":"2026-07-06T17:04:05.327440Z","submitted_at":"2023-12-16T14:49:36Z","title":"TrojFSP: Trojan Insertion in Few-shot Prompt Tuning","version":3},"cited_work":{"arxiv_id":"2312.10467","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.10467","snapshot_observed_at":"2026-08-07T05:59:35.079221Z","title":"TrojFSP: Trojan Insertion in Few-shot Prompt Tuning","venue":"cs.LG","work_id":"bf55efbc-bb72-4d1f-a57a-9eefaec9770f","year":2023},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.790861Z"},"links":{"cited_paper":"/paper/2312.10467","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:96840575c10bc32d412faa89cc663c99695db8553cb299895329fb7629a8d8b0","observation_id":"71be9c78-f066-481d-8ca1-485550ad4c19","resolution":{"observed_at":"2026-08-07T05:59:35.156988Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:36.453419Z","title":"JournalArticle","venue":null,"work_id":"e403b276-5510-4f27-843c-f75581eb580d","year":2018},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:34.901448Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:20e3ddec314d4b46bc262752012e17cd9d9172a9a748f9fe164af71a02d153c8","observation_id":"4967d7ba-fe3e-4774-808e-96c439c47719","resolution":{"observed_at":"2026-08-07T05:59:36.503571Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:37.154569Z","title":"Chao-Yuan Wu and Philipp Krahenbuhl","venue":null,"work_id":"e7966c55-c2c9-4253-88ca-d8d3e2a6eb47","year":2016},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.900964Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:c723132d77c8f35f9a73624c9b849568f7ae43751c00e17ff76b900cf84afc71","observation_id":"0ec3ea43-93b8-4eca-8051-f9c51c840592","resolution":{"observed_at":"2026-08-07T05:59:37.245096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-07T05:59:31.941509Z","title":"https://api.semanticscholar.org/CorpusID:36122023 Yanjiao Chen, Xiaotian Zhu, Xueluan Gong, Xinjing Yi, and Shuyang Li","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:31.941509Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:eec412f5426e4d90c9c9cfe3c0fad5a5462dc56eba37e1145f7d8771f3dcf021","observation_id":"d9d3ebee-5c8c-4c2e-a9cc-a812e2c34751","resolution":{"observed_at":"2026-08-07T05:59:31.941509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1804.00792","last_updated":"2018-11-10T15:37:17Z","snapshot_observed_at":"2026-07-06T06:31:26.893246Z","submitted_at":"2018-04-03T02:24:31Z","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","version":2},"cited_work":{"arxiv_id":"1804.00792","doi":null,"metadata_source":"pith","pith_arxiv_id":"1804.00792","snapshot_observed_at":"2026-08-07T05:59:35.575535Z","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","venue":"cs.LG","work_id":"0cc73215-3db4-4a23-8049-ebd22e13f3b8","year":2018},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.161431Z"},"links":{"cited_paper":"/paper/1804.00792","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:826e3703acc2c3f8ac261efd5fb97eb75f61ca6d1f9e9e06047ef728fe0f9da0","observation_id":"d736a673-c3cf-4879-986c-2a5e3603022d","resolution":{"observed_at":"2026-08-07T05:59:35.672859Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:38.725797Z","title":"InProceedings of the 57th Annual Meeting of the Association for Computational Linguistics","venue":null,"work_id":"004fd5f9-91cf-48d0-af4c-b2dc3fd0db6e","year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.087197Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:25dde68575e0788014aa769353fd3224d5dfa8b342f3d7fa863702ed1aa1a949","observation_id":"cf0355ee-e631-412e-b2ac-d880a32b1e3b","resolution":{"observed_at":"2026-08-07T05:59:38.777360Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2005.14165","last_updated":"2020-07-22T19:47:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-05-28T17:29:03Z","title":"Language Models are Few-Shot Learners","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.14165","snapshot_observed_at":"2026-08-07T05:59:31.742485Z","title":"https://api.semanticscholar.org/CorpusID:218971783 Alvin Chan, Yi Tay, Yew-Soon Ong, and Aston Zhang","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:31.742485Z"},"links":{"cited_paper":"/paper/2005.14165","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:814f704a93ae88f79461b7b7d4a842c613e426e8cdf2ee2b13d6e973910afadb","observation_id":"1e152b2c-3f03-45df-880d-9f79e0c60b36","resolution":{"observed_at":"2026-08-07T05:59:31.742485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:39.573883Z","title":"Neurocomputing452 (2021), 253–262","venue":null,"work_id":"6486f216-3a2f-452d-825f-cceee0c43759","year":2021},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:31.888248Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:902f351ebdce1a2db22b8dc69cbe01c091c9cb3da57778bfa4c99db2b38569df","observation_id":"700648d1-b34b-44d7-9827-28743625c0ce","resolution":{"observed_at":"2026-08-07T05:59:39.657902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00374","last_updated":"2024-09-11T12:48:42Z","snapshot_observed_at":"2026-07-06T16:55:29.501535Z","submitted_at":"2023-12-01T06:36:17Z","title":"The Philosopher's Stone: Trojaning Plugins of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.00374","snapshot_observed_at":"2026-08-07T05:59:31.982339Z","title":"Peiran Dong, Song Guo, and Junxiao Wang","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:31.982339Z"},"links":{"cited_paper":"/paper/2312.00374","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:63ab6bb44707f2d7ec420f897dc6d2feaaaf17bcd17ee7ec71ca8269db066451","observation_id":"44799b92-407a-4d5b-b65b-676128cf83e3","resolution":{"observed_at":"2026-08-07T05:59:31.982339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:39.416932Z","title":"Surveys55, 13s (2023), 1–39","venue":null,"work_id":"a421c81e-c0b9-4513-922d-38e1589ce210","year":2023},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:31.973217Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:95aa40e26edfe63c67ddbadc3cfa64fced44da95151241a12fa929d82d068a5f","observation_id":"ab797731-8204-4237-bc4f-aca8f71eb6b5","resolution":{"observed_at":"2026-08-07T05:59:39.505513Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:59:39.678015Z","title":"https://huggingface.co/1231czx/llama3_it_ultra_list_and_bold500","venue":null,"work_id":"99d73b99-6007-46d5-8a02-ba4db2dec0f2","year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:31.570249Z"},"links":{"citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:0f48c7d1e76e42d8ae52006a1ecfb42ba592531fde75bad4da97f1dc51faea29","observation_id":"663ad437-3e48-471f-8a2c-019b653073f8","resolution":{"observed_at":"2026-08-07T05:59:39.754086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:52:43.506241Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models"},"reference_resolution":{"displayed":53,"state_counts":{"malformed_identifier":0,"metadata_mismatch":5,"parse_uncertain":0,"unresolved":25,"verified_exact":1,"verified_fuzzy":22},"total_outbound_references":53},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 1 inbound Pith citation observation for arXiv:2506.06518."}