{"as_of":"2026-08-08T04:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a62ef7d6c628f9d488fcd18daf80aae097a3d1e76feb7dbbe7dbeeffbe2dfc69","coverage":[{"denominator":54,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":54,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T15:32:05.075485Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T17:51:45.653822Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-30T20:15:05.280261Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"cited_work":{"arxiv_id":"2508.19774","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19774","snapshot_observed_at":"2026-06-30T20:15:05.280261Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again,","venue":null,"work_id":"5f98276c-d4f2-4ebf-9676-8398c3356c78","year":2025},"citing_paper":{"arxiv_id":"2510.10486","last_updated":"2026-04-25T03:41:56Z","snapshot_observed_at":"2026-07-06T22:32:27.698678Z","submitted_at":"2025-10-12T07:33:56Z","title":"MEASER: Malware embedding attacks on open-source LLMs","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-18T08:09:54.788025Z"},"links":{"cited_paper":"/paper/2508.19774","citing_paper":"/paper/2510.10486"},"observation_digest":"sha256:006e21005b79130f0966ae9b03d4c00ac6d9642a5b14f5300b984ae530f01b5d","observation_id":"ee7971f1-41c9-4763-ae2b-a03952f5f69b","resolution":{"observed_at":"2026-05-18T08:11:06.758973Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"cited_work":{"arxiv_id":"2508.19774","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19774","snapshot_observed_at":"2026-06-30T20:15:05.280261Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again,","venue":null,"work_id":"5f98276c-d4f2-4ebf-9676-8398c3356c78","year":2025},"citing_paper":{"arxiv_id":"2605.15084","last_updated":"2026-05-14T17:07:29Z","snapshot_observed_at":"2026-08-06T03:18:42.691445Z","submitted_at":"2026-05-14T17:07:29Z","title":"PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-30T20:10:23.260802Z"},"links":{"cited_paper":"/paper/2508.19774","citing_paper":"/paper/2605.15084"},"observation_digest":"sha256:2419598f4a7a653f8b5bd8392be3c4d5579264fc3dd8f19f7752188c47b27c0f","observation_id":"53017416-a208-430c-a122-82ccf21b54ec","resolution":{"observed_at":"2026-06-30T20:15:05.282609Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.19774","snapshot_observed_at":"2026-08-01T17:51:45.653822Z","title":"The art of hide and seek: Making pickle-based model supply chain poisoning stealthy again,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.653822Z"},"links":{"cited_paper":"/paper/2508.19774","citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8316429b2846925d373e5a6260262f4bf9e85d1488cd3010cbe95b0e78919146","observation_id":"aa0daeb5-56d7-41bd-a796-603606263552","resolution":{"observed_at":"2026-08-01T17:51:45.653822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.19774/citation-record","integrity":"/paper/2508.19774/integrity","json":"/paper/2508.19774/citation-record.json","paper":"/paper/2508.19774"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.805352Z","title":"PyTorch,","venue":null,"work_id":"56bace40-5357-48c1-896d-34fb45bdea2c","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.917999Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:d62a4e9c561dd072707cb6da58c73f4f982d034527aee573b7e7a543c8a91172","observation_id":"2f588848-0530-4524-984b-79691ff27c3f","resolution":{"observed_at":"2026-08-05T15:32:05.807644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.796225Z","title":"Hugging Face – The AI community building the future,","venue":null,"work_id":"62b8e557-5b30-42c5-8de9-9841685b7939","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.921443Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:88970bfbc89f8ec09ec35aa040b71510919ffa599b0bfd2c594013d684baf9d0","observation_id":"92927e76-52e6-495d-8396-f063fd64fa8c","resolution":{"observed_at":"2026-08-05T15:32:05.800525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.788923Z","title":"ModelZoo,","venue":null,"work_id":"932c1f09-5466-4e1f-afe8-3c420ad9c8f6","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.924940Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:48cc73bc18423e4aa788fedcc019b219704ffd8226e1a21acc44ea3810b9c1f0","observation_id":"71cf5939-330b-43dd-b4dd-f83a2ba0badb","resolution":{"observed_at":"2026-08-05T15:32:05.791351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.780280Z","title":"BERT: Pre- training of deep bidirectional transformers for language understanding,","venue":null,"work_id":"eca06d29-6b0a-4696-b92d-50fa65614773","year":2019},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.927970Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:81f6010afe98f1db919b67f23cdcca4b4673fdceb54aae45cb83d68dc169d50b","observation_id":"7d8862ea-d44d-4b70-a575-2d5f447819bf","resolution":{"observed_at":"2026-08-05T15:32:05.783927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:04.931575Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.931575Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:cc391dab450f7f2aa59074f6d79050cdba7cc694b2f8909aaf0762e50aa9c09c","observation_id":"dc401e8f-aee9-4eaf-9572-05637e37bf34","resolution":{"observed_at":"2026-08-05T15:32:04.931575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.767734Z","title":"Language models are unsupervised multitask learners","venue":null,"work_id":"efbb59f5-d944-4d7f-a43d-4439f5613cc5","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.934443Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:3a632fa9d128103b6787e54a4096017d5dd0789386c9455596e7c5234e9964cc","observation_id":"5bf7b2ae-35c9-4604-b7ac-a24f68629765","resolution":{"observed_at":"2026-08-05T15:32:05.770423Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:04.937269Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.937269Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:583e0478806cb2b13bcfbf3242342f97ea72634ab96bef400a9980aaf7a5a1c0","observation_id":"bcbefcad-6a0d-4986-aba7-b0f01eb08318","resolution":{"observed_at":"2026-08-05T15:32:04.937269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:04.940252Z","title":"Densely connected convolutional networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.940252Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:c54541597af207ed33d9ab1e1483959a53d1dee3ba92f2acb3707a1d65dae052","observation_id":"fffb4416-7db7-4f0f-ad8f-25dd569438a2","resolution":{"observed_at":"2026-08-05T15:32:04.940252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:04.943292Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.943292Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:4c0cbe51d50dd3c9c2c155eed4a9e9702c6e063cb7caad778b470bb0b1e274d4","observation_id":"6fe83873-e6b7-45be-ac96-e080eee96a56","resolution":{"observed_at":"2026-08-05T15:32:04.943292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.746626Z","title":"safetensors,","venue":null,"work_id":"21b1a0be-a0e6-4548-b269-163622baa19c","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.946216Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:00a3ee0ab964c3aaa45c5782502939c91e1ce661e72c013a1b8bd90ca8767599","observation_id":"c0b0317f-9843-42a8-82b7-e40a1cedeaa1","resolution":{"observed_at":"2026-08-05T15:32:05.749208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.738958Z","title":"Models are codes: Towards measuring malicious code poisoning attacks on pre-trained model hubs,","venue":null,"work_id":"a0f4b1d9-a88e-4cbd-b298-bba49fe09b08","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.948875Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:9b0907a21d69e1bf3d512518f6facfe2b4c819b64406479c8f7e0297cf455a19","observation_id":"ea7c1932-9213-4eea-9792-c3165f136121","resolution":{"observed_at":"2026-08-05T15:32:05.741832Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.731234Z","title":"picklescan,","venue":null,"work_id":"a57cdfb0-4fd3-42a5-80f3-332e2237114f","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.951816Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:60af0c6427583b43604a75b485d95ee1fcb28fb1c7a2b3223779f44f07f93399","observation_id":"a25f2a4c-f851-4a96-bf2a-1616a711d4d0","resolution":{"observed_at":"2026-08-05T15:32:05.733704Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.723929Z","title":"modelscan,","venue":null,"work_id":"94a0709b-c165-4a6f-9399-89c6aceb78b0","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.954438Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:2b08a526dbe44b63c951e8d6d259e0ffe991fcf453a65db0fd0ea969f9eb38ec","observation_id":"80a6864f-bbfb-4fad-8172-7f4708cf57f5","resolution":{"observed_at":"2026-08-05T15:32:05.726757Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.716825Z","title":"Pickle scanning,","venue":null,"work_id":"b2b55dd7-6b2b-416c-a914-a1d938d3b53e","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.957112Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:0c13376605a1f2e5ae3ab9835ce2b9554fbb2394ba4b6da8aa255e41497918e7","observation_id":"ca2955e5-d03b-4dbb-bbf4-563121eb99db","resolution":{"observed_at":"2026-08-05T15:32:05.719253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.709780Z","title":"Third-party scanner: Protect AI,","venue":null,"work_id":"382e9bd1-a5f4-4ba6-8bf3-109addeb8fa0","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.959747Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:408f62ce5ed85cdc3f96619b0dd452abe02ff5634e9fbc1e660de3c51fbd4e64","observation_id":"43aeeac9-be85-4242-8034-79d2d8325b8e","resolution":{"observed_at":"2026-08-05T15:32:05.712183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.702459Z","title":"pickle — Python object serialization,","venue":null,"work_id":"f9c579e2-ebde-4c67-a57d-143c57eaee54","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.963243Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:4a57927ed2b152f9a0ce2c7067a914c0110bdd325a34e59ca1d00c647d2efd32","observation_id":"08ba6cb6-f8ea-4f23-b32b-39454a55dd3d","resolution":{"observed_at":"2026-08-05T15:32:05.705061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.695383Z","title":"We R in a Right Pickle With All These Insecure Serialization Formats,","venue":null,"work_id":"0e1520b5-682e-4f2e-b55c-483e6f5e25d3","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.965951Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:e962969f604842e4045d2fb192b7fef1426151a9268df0a200ef8a30b291d360","observation_id":"28c0b6de-8f1a-451a-a38d-b939f8eac87d","resolution":{"observed_at":"2026-08-05T15:32:05.697913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.687605Z","title":"Never a dill moment: Exploiting machine learning pickle files,","venue":null,"work_id":"97c98ddf-70a5-465d-827a-bdc2d410d42a","year":2021},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.969071Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:084dd935ccf75096822ddf4893b750fee61bd902ccff479ea145ef4f7da52760","observation_id":"b4466fee-1c17-4e56-aede-3a4b69cbb0bc","resolution":{"observed_at":"2026-08-05T15:32:05.690057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.680328Z","title":"Peatmoss: A dataset and initial analysis of pre-trained models in open-source software,","venue":null,"work_id":"368b9d12-9e08-4c86-a2ad-926b2c2c8b59","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.971668Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:cd9c59aebc41c0d186ede29fbc3b2c381c15163c3f0da9f1fde37f5e8cee7712","observation_id":"4fc8d286-e16a-4fe6-8b73-4f3b393df224","resolution":{"observed_at":"2026-08-05T15:32:05.682792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.672968Z","title":"Data scientists targeted by malicious hugging face ml models with silent backdoor,","venue":null,"work_id":"9db54e45-9f72-4466-900d-822747c9e5cb","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.974397Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:11cea09384dc75203370275a7e6e2b54b9118dd75d1dd7b17ca09997cf197de0","observation_id":"bd78720b-bcdd-465a-951f-32d6de164b46","resolution":{"observed_at":"2026-08-05T15:32:05.675457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.665443Z","title":"Models are code: A deep dive into security risks in ten- sorflow and keras,","venue":null,"work_id":"051a7f53-0b57-48db-ba6f-993c58bcb1ee","year":2023},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.977875Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:ef18adb667274c906042a2169651de7603233373efe273e1587040fd6e48baee","observation_id":"04e527f6-19c5-42a9-a66a-7f312c8d6dc9","resolution":{"observed_at":"2026-08-05T15:32:05.668032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.657394Z","title":"Confused Learning: Supply Chain Attacks through Machine Learning Models,","venue":null,"work_id":"e87687c5-63a6-45a6-9e27-a35f69910e48","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.980834Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:9ffbc674eab326ff4d9fc6be1d504786efbab5e64b307b9636540eb8327be1ba","observation_id":"7c26da70-23fa-4a25-8cf4-3e0cc1bbfab9","resolution":{"observed_at":"2026-08-05T15:32:05.660435Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.650110Z","title":"Model File Vulnerability Bug Bounty Program,","venue":null,"work_id":"2a1630f2-d478-4a87-81d1-c82643853461","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.983886Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:93caa4daab1e7dbfc651b06cb48b68522c4199f89490fde8f4e0b8c3af056dc2","observation_id":"548f820f-3870-4eb1-b43b-5b94ac2ab157","resolution":{"observed_at":"2026-08-05T15:32:05.652569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.642781Z","title":"Numpy: The fundamental package for scientific computing with python,","venue":null,"work_id":"131c1397-a750-4098-9f4c-04f98e37641d","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.986652Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:cdb3626b923144042f692b0c5070bfd741fec059d507c8ff218c1156b0cccc7f","observation_id":"2f9dbc58-974a-4509-8fd6-68f76a1c0ceb","resolution":{"observed_at":"2026-08-05T15:32:05.645414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.635403Z","title":"Joblib: Computing with python functions,","venue":null,"work_id":"2b1e7245-cedd-4460-8237-5c880c6f89ca","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.989458Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:dc90a6a9cd89c2fbc1a605e92c4d35561c0caf775cb1e68586b41d5d70605a34","observation_id":"948b09da-3bca-439f-9199-998ac266a776","resolution":{"observed_at":"2026-08-05T15:32:05.637891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.628156Z","title":"Tensorflow: An open source machine learning framework for everyone,","venue":null,"work_id":"64d86fbc-55f1-4c55-83b2-177d40554465","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.992397Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:5316e8d7d23824478f465351c5174b6923d534a24b91f7bc9cc65cad263621e5","observation_id":"ec6ee654-0370-4f0d-b8ce-a95605feba21","resolution":{"observed_at":"2026-08-05T15:32:05.630819Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.621003Z","title":"Keras: Deep learning for humans,","venue":null,"work_id":"77109b8f-2658-4459-9cd4-ad0731998344","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.995435Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:14cd6d32b4a4f09ed7e88ad1c221554b1733d842658bcec018144dc5ca815995","observation_id":"3853c030-3e37-4c5b-be4a-a084c0760b97","resolution":{"observed_at":"2026-08-05T15:32:05.623410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.613598Z","title":"Nvidia nemo: Build custom generative ai,","venue":null,"work_id":"18686cc1-7779-44a0-9fb5-095071dacb17","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.998754Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:96a3c6ca20b7be6f930ab79cc863a4f5084ba64137add2b063401f457d635414","observation_id":"6bdf370f-20f6-4173-b9a8-8b4e736fb7ae","resolution":{"observed_at":"2026-08-05T15:32:05.616286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.606655Z","title":"Tensorflow Model Format,","venue":null,"work_id":"369c2814-bbcf-4ac6-8282-bfe4a59cf158","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.001840Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:18db2834f48569c9a773aa1ebf34fb5c22fc8f08af076f20e4eb9a61c85d65d1","observation_id":"74871a0e-c046-4455-803d-ec5cbd0cc5aa","resolution":{"observed_at":"2026-08-05T15:32:05.608982Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.598746Z","title":"Pickora,","venue":null,"work_id":"54de4ccb-fd97-443e-b951-bce67805b336","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.004772Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:ced24a96afa60ba089e3c7a29ca4064eb209e9fbe5036fd9c88362dad9a34860","observation_id":"dd9f50ae-8378-4353-8144-20d9a79812a2","resolution":{"observed_at":"2026-08-05T15:32:05.602069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-05T15:32:05.007662Z","title":"Deepseek-v3 technical report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.007662Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:8736b53b56a8d09032ccfd6c7a1326264f3a964e878fe6342e7799055885fbf7","observation_id":"0981f552-550e-41a6-9bac-e3cc1677ce0d","resolution":{"observed_at":"2026-08-05T15:32:05.007662Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.590812Z","title":"Chatbot arena: An open platform for evaluating llms by human preference,","venue":null,"work_id":"03fd91f3-2c48-469f-9f36-19d6033aec60","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.013067Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:54c3718fbd4cee1d1fe4ef0ce9dda23647c4c43692a4fd683d66dd4e510d1ca5","observation_id":"79101cff-438b-40aa-b1bc-3cf7ce48647b","resolution":{"observed_at":"2026-08-05T15:32:05.593656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-05T15:32:05.017165Z","title":"Gpt-4o system card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.017165Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:ac805aa468e554ec37a1dd041a43aa9e12dcd38fcbfb7a626783e60ab428b088","observation_id":"1d892db2-d33b-4868-878b-9ab59f91e9fe","resolution":{"observed_at":"2026-08-05T15:32:05.017165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.583483Z","title":"restrict joblib loading to only certain classes,","venue":null,"work_id":"1dc76ae5-7f1d-4fb2-9cd0-b3668b94149b","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.020045Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:1580fd7bcb19dd73a6111c352a48c1628464ed450beb2e500bcf53931c073edc","observation_id":"a1c8ab7a-c2e3-45f4-b6a0-13c64c66de50","resolution":{"observed_at":"2026-08-05T15:32:05.585974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.575814Z","title":"Update torch load for load from disk,","venue":null,"work_id":"afb83f7e-4829-42c1-8ba5-cb8b47e29856","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.022640Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:7342d4f83ec9ed70b0e56d5b083f63e6a86b515a3641382b3d6481239b888d1f","observation_id":"d6c77dfc-257e-4cd4-8392-dfde74a24973","resolution":{"observed_at":"2026-08-05T15:32:05.578722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.567331Z","title":"fickling: A python pickling decompiler and static analyzer,","venue":null,"work_id":"2a8ba0e8-85fb-432c-b29f-e29adae6fdf4","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.025531Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:230a3cfe6c268ef88419326a0b1f81e09f7a03cb450086210db09eaea4de6758","observation_id":"1672c9d4-da20-4153-80ef-55366b9abc5d","resolution":{"observed_at":"2026-08-05T15:32:05.570730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.028062Z","title":"Pickleball: Secure deserialization of pickle-based machine learning models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.028062Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:5d668c59c03d4def6fb2156fb94bfc322bc77ea0feef69168f398c047fffec77","observation_id":"226c8b96-09ad-422b-b4d7-8f7d77e0e100","resolution":{"observed_at":"2026-08-05T15:32:05.028062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.559795Z","title":"My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs,","venue":null,"work_id":"f8311b70-8626-42e8-923f-597ba7fa08e3","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.031033Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:bd71b4b12ba347bb143919123cf8802c06b0fb0b75fad61c41e442d693a37da9","observation_id":"8fc2bb05-5a98-47d8-8a3f-76f20bcb9ee6","resolution":{"observed_at":"2026-08-05T15:32:05.562517Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.552066Z","title":"How to Make Hugging Face to Hug Worms: Discovering and Exploiting Unsafe Pickle.loads over Pre-Trained Large Model Hubs,","venue":null,"work_id":"6cdc7fe6-e861-4d42-a125-5d837730282c","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.033421Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:c5ed0aa5bae4cd201174c202dac76bdf0cbe03fbd92d681554949bd10b7a8478","observation_id":"9e1ebfc8-8d0c-4c18-883c-ce8129c477cb","resolution":{"observed_at":"2026-08-05T15:32:05.554843Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T15:32:05.036028Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.036028Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:3278013fd4ffd6132841fcd3c9f82aeb6dab8e83fd96ddb718edf7641197f60c","observation_id":"307a95c0-19f1-43c2-9231-f7d42fd937ce","resolution":{"observed_at":"2026-08-05T15:32:05.036028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.544109Z","title":"An empirical study of artifacts and security risks in the pre-trained model supply chain,","venue":null,"work_id":"c74f0440-0fb5-4979-895a-804e4e8cf11c","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.039097Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:a39d23eb0bf54b0d59b3edec7fd9f7d2cd3b058b160b76948924459af0755260","observation_id":"93c15d67-a8da-47a3-9132-6ebe16ae7342","resolution":{"observed_at":"2026-08-05T15:32:05.547159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.536054Z","title":"Pain pickle: Bypassing python restricted unpickler for automatic exploit generation,","venue":null,"work_id":"82cb2651-47c0-4f4d-b548-845ecb54bb63","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.041609Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:e70d96bbae6f7b0e6fd4b1bf3c963d0f815e5b5a8a59620a75a072bd01774d5f","observation_id":"011880e4-64b7-424b-8fb6-0462ca11267d","resolution":{"observed_at":"2026-08-05T15:32:05.538945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.527992Z","title":"Deep learning model reuse in the huggingface community: Challenges, benefit and trends,","venue":null,"work_id":"53b8cd15-c9bb-4df7-96a6-f5a04c627b3a","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.044345Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:cd6575fb337a9322153ccd218287e50586c127f93e6e4846d99046dd177c3069","observation_id":"0829b348-0e3d-44cf-ae89-5bc629029f39","resolution":{"observed_at":"2026-08-05T15:32:05.531010Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.519781Z","title":"Stegonet: Turn deep neural network into a stegomalware,","venue":null,"work_id":"3223ccaf-4d3c-4ce1-8ebc-501cd5fcedb9","year":2020},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.047211Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:a55e7b723dab055abae1f15f0d916eaf24331e94d3ab57dfd39a98a5bd75d0a8","observation_id":"ae1c0d9b-888b-4361-8b00-b9d470667ad2","resolution":{"observed_at":"2026-08-05T15:32:05.522841Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.511537Z","title":"Evilmodel: Hiding malware inside of neural network models,","venue":null,"work_id":"3565af53-aa14-4ae3-8c46-82aed62360f4","year":2021},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.049691Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:57981da6f523154b6dbf8b1d345f8e339f8edd326ee676ec40d463c6136d6d51","observation_id":"3fa500a8-e688-44d7-bf38-0439bec0032c","resolution":{"observed_at":"2026-08-05T15:32:05.514618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.502904Z","title":"Evilmodel 2.0: Bringing neural network models into malware attacks,","venue":null,"work_id":"13caac3e-23aa-47cb-b660-e50a094b02e2","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.052125Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:50517b07834ba15765b68c67dae772540ecb3e69d3bf1160cd8f4744646854ea","observation_id":"f5fdaf2c-6c9f-4097-88e8-83f26c752a9a","resolution":{"observed_at":"2026-08-05T15:32:05.505981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.03593","last_updated":"2025-07-04T09:59:48Z","snapshot_observed_at":"2026-07-06T17:40:20.922598Z","submitted_at":"2024-03-06T10:27:08Z","title":"Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem","version":3},"cited_work":{"arxiv_id":"2403.03593","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.03593","snapshot_observed_at":"2026-08-05T15:32:05.171145Z","title":"Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem","venue":"cs.CR","work_id":"a48729dd-0523-4d35-ba0c-0d60501f4573","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.054641Z"},"links":{"cited_paper":"/paper/2403.03593","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:db4b33abb290689495f4ffa31da5cd39ce16a883131f314362c8c7a26017a32e","observation_id":"2c0bd3bf-8ef3-4fca-a71c-a77ba23adccf","resolution":{"observed_at":"2026-08-05T15:32:05.206119Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.02659","last_updated":"2024-01-05T06:35:24Z","snapshot_observed_at":"2026-07-06T17:11:55.112404Z","submitted_at":"2024-01-05T06:35:24Z","title":"MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack","version":1},"cited_work":{"arxiv_id":"2401.02659","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.02659","snapshot_observed_at":"2026-08-05T15:32:05.127655Z","title":"MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack","venue":"cs.CR","work_id":"e4df8088-5888-47c7-8754-de381fe1b6a7","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.057421Z"},"links":{"cited_paper":"/paper/2401.02659","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:9bf100ebc63e3ca9d77ef259fd44c21ee01ccaf1ba76ddb7aeaa063442b96850","observation_id":"a7a48b4a-c281-49ae-a8e4-a502d34a784b","resolution":{"observed_at":"2026-08-05T15:32:05.132007Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.494054Z","title":"Steganalysis of ai models lsb attacks,","venue":null,"work_id":"e2ded556-0684-4be1-8afe-530e1240e6a0","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.060292Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:02fc3d57fa829a0c7a414bfa7f7f3f81861b5a3fffe63469c76a94b0fb98590c","observation_id":"e8b56047-f6fe-4414-b826-6267c9e6a83f","resolution":{"observed_at":"2026-08-05T15:32:05.497024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19310","last_updated":"2024-09-28T10:45:28Z","snapshot_observed_at":"2026-07-06T19:23:50.186410Z","submitted_at":"2024-09-28T10:45:28Z","title":"Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning","version":1},"cited_work":{"arxiv_id":"2409.19310","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.19310","snapshot_observed_at":"2026-08-05T15:32:05.099920Z","title":"Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning","venue":"cs.CR","work_id":"3af88eac-d2b0-430f-8ec9-7c50085ca0af","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.062875Z"},"links":{"cited_paper":"/paper/2409.19310","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:4419dfaed9d296e13983726d101a7a1b92ddacb00ab7e6499bf7a386e67fc835","observation_id":"272ee81a-8120-4854-b37a-25bf4ccf31e3","resolution":{"observed_at":"2026-08-05T15:32:05.115653Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.485465Z","title":"os\").system(","venue":null,"work_id":"51abae50-af4b-4b6a-8823-abf27815c586","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.066161Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:80ed6f1420cbf1d4ce93f976e39cc87eaa4e5d7d2df555bd2f0832b8fb13bc82","observation_id":"83ab4e70-dc6b-444b-9052-8b7d62bec639","resolution":{"observed_at":"2026-08-05T15:32:05.488678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.475482Z","title":"As demonstrated in Figure 5, the function resolve_dott ed_attribute takes three parameters: obj, attr , and allow_dotted_names, among which obj and attr are particularly critical","venue":null,"work_id":"a764fb1d-3c80-4fc8-a62c-cbf9f0f9d2be","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.069408Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:650c243627e33bd39b3d882c93cd064ac0ab4d420d4848e8f17918436bcdddb2","observation_id":"1b9489f3-d45e-460d-b227-cfba0fe4e892","resolution":{"observed_at":"2026-08-05T15:32:05.479044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.450775Z","title":null,"venue":null,"work_id":"541c7d59-3e26-4695-8b3b-d16ab96d61f6","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.072388Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:b3079688c4d47a3337ea0bda630653cee8ab0936de17f9f932a31ccaf61317ed","observation_id":"47e02a29-40e0-4d81-99df-b628df83c87f","resolution":{"observed_at":"2026-08-05T15:32:05.468709Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.351773Z","title":"\": 6 # List opcodes 7 try: 8 ops: List[Tuple[Any, Any, Union[ int, None]]] = list( 9 pickletools.genops(data) 10 ) 11 ... 12 for n in range (len(ops)): 13 ... 14 elif op_name ==","venue":null,"work_id":"8b712974-51b5-446a-a9c2-f5375008f79b","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.075485Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:8977de0a7fdce99784e4a8047fa0d5f6bf418f0b26bb98eb0b6a36545f9041da","observation_id":"1d71b0b2-aebc-4a25-9d46-a55cbdb5c0d0","resolution":{"observed_at":"2026-08-05T15:32:05.404154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again"},"reference_resolution":{"displayed":54,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":3,"verified_fuzzy":42},"total_outbound_references":54},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 3 inbound Pith citation observations for arXiv:2508.19774."}