Paper Citation Record · LEDGER

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents

As of 7 August 2026, this Paper Citation Record lists 43 of 43 outbound references and 0 inbound Pith citation observations for arXiv:2506.13205.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.13205 v6

Coverage vector

measured 43 of 43 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T00:41:18.574211Z

measured 43 of 43 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

43 of 43 outbound references displayed

verified exact1
verified fuzzy4
unresolved38
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 71527a2e-caed-4e15-a9e0-98e6f1ebf195 · outbound

This paper cites , " * write output.state after.block = add.period write newline.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents , " * write output.state after.block = add.period write newline

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:16.122277Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c2ba7ac-3ca8-48aa-80e9-22d2300d174a · outbound

This paper cites write newline.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents write newline

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:16.203281Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 047da159-882b-4a99-82a3-4ae4a11b850c · outbound

This paper cites Flamingo: a Visual Language Model for Few-Shot Learning.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Flamingo: a Visual Language Model for Few-Shot Learning

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:16.316084Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f559a777-556a-4a7e-a75f-46817e059f45 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 4

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.244305Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 30b1a136-5a95-4b84-b526-68421a40936a · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 5

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.231700Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation f48c211c-d971-4c6d-8b28-7132066f2350 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 6

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.218959Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation fd977ed3-8e55-4362-b665-ed04b9859aa6 · outbound

This paper cites Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:16.805250Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fe7a3e3a-ec04-4b8f-ab34-906f12f4be50 · outbound

This paper cites H.; Huang, W.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents H.; Huang, W

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T00:41:19.205878Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 8cd1fc27-94eb-4bac-a002-8f8e9320cc30 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 9

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.192259Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 05567f60-673e-4560-94a0-2a28d88406b8 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 10

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.176938Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation b1ffaa13-825f-4d38-956a-0220a1cd981f · outbound

This paper cites R.; Geiping, J.; Fowl, L.; Taylor, G.; and Goldstein, T.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents R.; Geiping, J.; Fowl, L.; Taylor, G.; and Goldstein, T

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T00:41:19.162735Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 12fb763a-e467-4558-a99f-4d1798bee74e · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 12

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.148956Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 852e8dac-7d3e-49cc-b8aa-4d9becc15057 · outbound

This paper cites S.; Knox, W.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents S.; Knox, W

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:17.282335Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e7c7becf-7277-4fe9-91e6-bf3a04c8bdb4 · outbound

This paper cites Benchmarking Mobile Device Control Agents across Diverse Configurations.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Benchmarking Mobile Device Control Agents across Diverse Configurations

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:17.321712Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2590e9a0-22d1-41d3-9e73-0835c4902d5e · outbound

This paper cites BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:17.364681Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0b43a751-bbf9-43e8-9a6f-6f57eb772b7c · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 16

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.134878Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 9d17126a-29cf-49fa-b05d-e2ae646f4325 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 17

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.121076Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation fe9bb3b5-cb11-49d0-8840-557356e91df3 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:17.650179Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6f46186f-673f-48bb-a3cf-67794586aeb1 · outbound

This paper cites Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:17.724760Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 042b83e8-ab2a-460b-9818-f4055291f251 · outbound

This paper cites MIS-AVoiDD: Modality Invariant and Specific Representation for Audio-Visual Deepfake Detection.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents MIS-AVoiDD: Modality Invariant and Specific Representation for Audio-Visual Deepfake Detection

Reference 20

Resolution: verified exact; local_arxiv, observed 2026-08-07T00:41:18.735316Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation b935ded7-16e6-4fc5-bd1f-0ac7ac32744b · outbound

This paper cites Visual Instruction Tuning.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Visual Instruction Tuning

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:17.872548Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 81dd343f-693a-49ac-b385-ec6bd5c03380 · outbound

This paper cites F.; Craft, M.; Situ, J.; Yumer, E.; Mech, R.; and Kumar, R.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents F.; Craft, M.; Situ, J.; Yumer, E.; Mech, R.; and Kumar, R

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T00:41:19.097921Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation d4ccf8c1-e379-4f98-9f10-60bca8101441 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 23

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.078090Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 36bb6d2c-5470-4a9d-9045-7f8d1f6517c1 · outbound

This paper cites AgentScope: A Flexible yet Robust Multi-Agent Platform.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents AgentScope: A Flexible yet Robust Multi-Agent Platform

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:17.973029Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 469bd970-a01a-49fe-9887-88f135acdc93 · outbound

This paper cites WaNet -- Imperceptible Warping-based Backdoor Attack.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents WaNet -- Imperceptible Warping-based Backdoor Attack

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:18.032579Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7bddd1bb-5689-49e0-a790-a70ba2823422 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 26

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.064656Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 09f46101-0cee-4bc7-89a3-2301a620a09e · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 27

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.050888Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 0869596f-3c64-45a0-9296-a1a22c1c7722 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 28

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.034562Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation db6a696d-8445-4965-961c-2ab73dd4cbbe · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 29

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.021031Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation cd9ffedf-7d3a-453d-b0d0-80e93b14bec2 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 30

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:19.008842Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 2d2c4f0d-959e-4331-a295-bbc88e9a4af5 · outbound

This paper cites Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perception

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:18.507084Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e3826458-78bc-4a43-8699-a7a884c0282d · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 32

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:18.995486Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 9d88c985-f126-4681-98e2-28a5645b11ca · outbound

This paper cites Mobile-Agent-E: Self-Evolving Mobile Assistant for Complex Tasks.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Mobile-Agent-E: Self-Evolving Mobile Assistant for Complex Tasks

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:18.527132Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 99bd5595-e0aa-4e31-b3a2-56a93b045cc4 · outbound

This paper cites Jailbroken: How Does LLM Safety Training Fail?.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Jailbroken: How Does LLM Safety Training Fail?

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:18.531498Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 99386c66-31b8-4dae-9717-110984556b4d · outbound

This paper cites Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:18.539302Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 16fb44d1-9eaf-465d-89a0-46f9917664db · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 37

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:18.979986Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 23a05e30-c1cc-4189-9e85-486f791a6025 · outbound

This paper cites Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:18.547648Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dbbba48e-6d31-4a6e-aca3-8652e5927198 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 39

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:18.966781Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 666ae75f-0ce3-427d-8ee3-2ee2b394d6a8 · outbound

This paper cites M.; and Jia, R.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents M.; and Jia, R

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T00:41:18.953891Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 0f79d009-b553-4cc4-a968-4649b3e79710 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 41

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:18.941166Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 6190e828-d1b0-430d-8cd1-810923b20c19 · outbound

This paper cites an unresolved cited work.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents Unresolved cited work

Reference 42

Resolution: unresolved; raw_fallback, observed 2026-08-07T00:41:18.928123Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation bc31b950-ecb2-4d67-aa18-e3b9c59d6dfd · outbound

This paper cites OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:18.569925Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d9c4fd39-0ecc-4900-9bd5-4723a34e3b89 · outbound

This paper cites MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models.

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-07T00:41:18.574211Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.