{"as_of":"2026-08-06T06:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2ec51e0a812505f78d1056f492480852711e61a2a5404288c7bc23e2b68c8f23","coverage":[{"denominator":78,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":78,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T14:08:35.474488Z","state":"measured"},{"denominator":78,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":78,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2604.01904/citation-record","integrity":"/paper/2604.01904/integrity","json":"/paper/2604.01904/citation-record.json","paper":"/paper/2604.01904"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"The work-averse cyberattacker model: theory and evidence from two million attack signatures","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:c0736c74ba7fd28f0a0a8c383a8afb26009737bed111f4bbec2982d6d1acd472","observation_id":"05ac459a-b1bc-4c87-905c-ec52d9f894b3","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:50c1f7a5622d922e82b0e538e536e20aa256f1ffeb5e6c594c912f13213962e6","observation_id":"a0d121c6-6ed3-4445-bdbf-80ee96ea8ecd","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Introducing the model context protocol","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:6d6c1f226c9616961b9571b50d26c75f576133bbe0a15febb04eb9693944f658","observation_id":"6d5506c3-f5b5-4910-983a-0f8d4e8e51c0","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-07-06T21:34:48.355215Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:4252085c84391bc820d33641c6eaedd189da26d6d13b31526ea8b3a278b010e8","observation_id":"3a7bd041-7041-4307-8f64-4cff778e1ffc","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Agentbound: Securing execution boundaries of ai agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:38fc5c353ba59236d387b61903b5cac8bb96a2250c4d4944cf1907f696802f6c","observation_id":"8ed6f7c2-a132-4f63-af4e-6ef770a770c9","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:19fba935e2c56e04b4ce8dd29a9ed29337526b39a21188ffb7143b5ebdeadf22","observation_id":"2a05d400-a505-4b75-a98c-f07b2f4d8fc2","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Connect claude code to tools via mcp","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:fb95d78a31b7ce6f93ce0023ce9c04cf50e08b5406ddd30301552d0030381f1f","observation_id":"1901a945-2876-4ad4-ab4c-0a1f11aa636a","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Introducing claude 4","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:e9cdac277ed1a784d1beef4597aab3e7d05e4fb44fe9918568eced9330b661c6","observation_id":"0a43b471-0f95-4c66-b1e3-846d22e91625","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Introducing claude sonnet 4.5","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:5210e64f36f81b4534031d60283b4080c545a268e29b39bea2507102200ab21a","observation_id":"a29735d3-862f-45ec-b1ab-9add40dd3246","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:2b356fdea2808da2d3c43165fffd4afdebb12ac27297dc263f6cd63fa26f8451","observation_id":"bb4ca6d9-6490-4774-b8f0-f9ffb52db7a1","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Cursor agent","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:5079920011330a1c8ecc446ef4c521f4d9af8c1fec55399c6cf2fab9e9882451","observation_id":"7f62aac0-0a3c-4fed-a212-fe5df57b4c2a","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Cursor directory - cursor rules & mcp servers","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:13ae925dec84a5fa485d2d39455e76e2d43bbf2e51215d22cd9ccf02b781c6d0","observation_id":"1dad0932-c650-45a6-8ab6-c095457bbb90","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Model context protocol (mcp) | cursor docs","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:0500a933f1cfa88a0f03921e2e38f765f5d1714654cd3b475dfb2246d4772eda","observation_id":"8bd95489-1646-4804-9cb1-5d5e6b39a857","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Deepseek-v3.1","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:7f85559ddd89328fc9daca2c3cd2604ec271ac7ae7191186c13cbf51e73920f4","observation_id":"a4897877-dbb1-457f-904e-1df03009ac5d","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02279","last_updated":"2025-05-23T00:28:09Z","snapshot_observed_at":"2026-07-06T21:18:50.421957Z","submitted_at":"2025-05-04T22:18:27Z","title":"A survey of agent interoperability protocols: Model Context Protocol (MCP), Agent Communication Protocol (ACP), Agent-to-Agent Protocol (A2A), and Agent Network Protocol (ANP)","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02279","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2505.02279","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:159872f1078d4ca6cbecfa5ae604deb53fa36971fbc75febd7eacec4b10ed134","observation_id":"43bcd556-dd95-498e-8f5a-8afae25b7a1c","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13666","last_updated":"2025-06-16T16:24:31Z","snapshot_observed_at":"2026-08-02T21:36:14.525228Z","submitted_at":"2025-06-16T16:24:31Z","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.13666","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"We should identify and mitigate third-party safety risks in mcp-powered agent systems.arXiv preprint arXiv:2506.13666, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2506.13666","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:6faafbcce71c34d50d2586d982123e56ae81508da1f8a522e488645abf0df710","observation_id":"99d5a936-f809-49ba-9bd3-93cff40c539c","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Enhanced prompting framework for code summarization with large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:9f8affde44bf0811eac0b0dd7422dde2857b163482284b864c62c15b7a2cea2b","observation_id":"9fa8d1ce-63bf-41f1-bc67-1926a5a286f1","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcp json configuration","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:cd9551ef2cca020ee65be83c6a97f9ce8504c1c74e73595b5587b1337636d795","observation_id":"c13c53fb-d8a4-4560-8778-e97e6424fc6d","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.23370","last_updated":"2025-07-31T09:37:22Z","snapshot_observed_at":"2026-07-06T22:05:38.642936Z","submitted_at":"2025-07-31T09:37:22Z","title":"Trae Agent: An LLM-based Agent for Software Engineering with Test-time Scaling","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.23370","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Trae agent: An llm-based agent for software engineering with test-time scaling.arXiv preprint arXiv:2507.23370, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2507.23370","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:cd584cfe0cf9e81a913e5ccef7224441969da95804458946f3feb3a3a164889b","observation_id":"c202be2b-a41f-4fa2-b289-7fa8a93b1938","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Malguard: towards real-time, accurate, and actionable detection of malicious packages in pypi ecosystem","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:6efbdbe11c6113212ecc9aa0ed5ac685603dc7993d3ecf5b25404fcc386d21a3","observation_id":"c54b3c1f-1603-412d-899e-3e753937d965","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Github copilot·your ai pair programmer","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:10a2aaad26f478504a2fcf7b8441bd867e011c9e9db54a2a2628e024ae88394f","observation_id":"f449b5d0-6bc6-4208-8f8e-bc47729667de","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Extending github copilot coding agent with the model context protocol (mcp)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:faf00f98fe4429e3c673eb566d537051afe2ae092446b034f6859827604b8168","observation_id":"6130758d-0314-44f8-af7c-b658bfabd788","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Popular mcp servers","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:8126c97af34421bb7f4d3a09c835a29d0d813e915f17f0e2a84513d95dcf96b9","observation_id":"d041a9d0-cb85-4cbc-93ac-b2ab0004d30c","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Gemini 3","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:d32a79260f6f9058a120dfa92d4ed3f9c84958f214949a034913a102ef7c5441","observation_id":"510098cc-d8d4-4404-a08e-a873e5a6fd1f","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Gtfobins","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:f15949e6c3c4a80e24281e0bfd7f3f9aa0f639ea99e471fe360a9d289e7b1c73","observation_id":"08ab3807-8dfa-43ac-bcb4-5e2ed9d783a3","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"A measurement study of model context protocol ecosystem.arXiv preprint arXiv:2509.25292, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:d2970fc47dff2dbe96f91c4711db3990ff7a3722c6052e9350ab236976906146","observation_id":"3df02055-7001-41a1-b9f7-1dde4c733267","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Large language model based multi-agents: A survey of progress and challenges","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:7c35f545ab8ad78174fa9a663db57413a79f26df564d331cf058d0723932a745","observation_id":"9d2eddf3-9cbb-46f6-aa0e-6c4c2629c470","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"An empirical study of malicious code in pypi ecosystem","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:68e149d813d391cf3f6200411c26354177a51a17f60946e74f59bc9d4a7bc2ae","observation_id":"bca28213-e80c-4385-8146-6cbff00a2946","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.12538","last_updated":"2026-05-25T07:08:19Z","snapshot_observed_at":"2026-08-05T19:27:11.696122Z","submitted_at":"2025-08-18T00:23:41Z","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.12538","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Systematic analysis of mcp security.arXiv preprint arXiv:2508.12538, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2508.12538","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:1b1695cf37258edf3214c94edfc6a52f2f5b04120b304b6edac0cf4393d2e815","observation_id":"b7b3ccf9-06f9-434a-a2af-cc189698804c","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"damn-vulnerable-mcp-server","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:f1c661fc8b17e2aef87fa8950b2582205f26f45e86f5d767bfb367c6a7a5d1e6","observation_id":"5daef7eb-3e71-426e-8338-b2104205c814","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13538","last_updated":"2026-04-13T03:45:24Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-16T14:26:37Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.13538","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Model context protocol (mcp) at first glance: Studying the security and maintainability of mcp servers.arXiv preprint arXiv:2506.13538, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2506.13538","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:03b43c60eb0ed3f346be8898856c967c74e39423105215d348673d8037cb5a12","observation_id":"aa5779f2-5fcc-49a2-862a-5aa546b7ff71","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.14878","last_updated":"2026-05-31T05:10:10Z","snapshot_observed_at":"2026-08-02T23:04:25.658810Z","submitted_at":"2026-02-16T16:10:11Z","title":"Model Context Protocol (MCP) Tool Descriptions Are Smelly! Towards Improving AI Agent Efficiency with Augmented MCP Tool Descriptions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.14878","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Model context protocol (mcp) tool descriptions are smelly! towards improving ai agent efficiency with augmented mcp tool descriptions.arXiv preprint arXiv:2602.14878, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2602.14878","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:ed4985ff419e1914d7a56ab44c82315e44bc8cb1747b1ac6fb73d318275ff4f8","observation_id":"a3ecf8e0-508c-482d-b464-bf9255f9a93c","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Automatic red teaming llm-based agents with model context protocol tools.arXiv preprint arXiv:2509.21011, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:747051a4aa412aeb0cd578f2b2939df6d78cc2edb8abea255397256a0a985282","observation_id":"4d82c420-497d-4432-94dd-e4aa0b5586a8","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Model context protocol (mcp): Landscape, security threats, and future research directions","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:ca1ffdea1b05035bef51bfb90b7b4fd33b0d46df36da5d363b9bf4f2de10972b","observation_id":"c75c0fd0-86a0-4a29-91de-3cd5188fa4e8","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Donapi: Malicious npm packages detector using behavior sequence knowledge mapping","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:40bd4c069c10bac0caff956db158a10616506abc1eed2a34a4414d4e9c36b406","observation_id":"e9cdabe8-d3f6-4a76-8588-df15c6c4b5d9","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Spiderscan: Practical detection of malicious npm packages based on graph-based behavior modeling and matching","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:c89df83c7eef1b9de9e984046356e619f19d0febd409a947456c86fa86ea302d","observation_id":"4b3c7b8c-618d-4456-afba-3048b981903a","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Profmal: Detecting malicious npm packages by the synergy between static and dynamic analysis","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:a5fc72b83fe218d2ac85fa60599e3889da4fe454b3115811d57172ca51bc4ed9","observation_id":"a40de1cd-4982-4fd7-88ab-f541e91c6385","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcp security notification: Tool poisoning attacks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:3fe0378bbef28846ae3ae7abb10829e5722f07a915410d9b8e64bb70059caadd","observation_id":"c5f84b85-f11b-43f5-98e7-4ac01aa0aea5","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Whatsapp mcp exploited: Exfiltrating your message history via mcp","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:725d4724b3a5cc38b00f622ccced590a25c3ce5e7eed1cf9105705a5c25f37e0","observation_id":"e0da2f05-164b-48c7-9aa7-f986415b01c8","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"mcp-scan","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:c0b3276693f72e2975d51f170d509b67398a7b053592fc0d681da6ffdd8e9eb8","observation_id":"2a65d71c-abb8-4b74-9aa8-997650ff0193","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcip: Protecting mcp safety via model contextual integrity protocol","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:763528315e6da05f928aafd92919098dc1536542be10fcee0be4b232cc5d1f43","observation_id":"bece21d7-f78c-4408-ba4d-789b9e0317b4","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Joern - the bug hunter’s workbench","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:22514cdda2e3120340947813c3c47ce39146926d8c7dc3af55cbc4f60beb7541","observation_id":"6e550151-a6b6-4ddb-9832-29eba082035a","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"3 malicious mcp servers found on pypi","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:ae8f86cb94c00948b2a58fca0c81b60db5d83fd822b704540370dba91372309d","observation_id":"b67edb24-4f37-46f6-ac7e-dd5dc9f5f114","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-05T17:22:12.116167Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:46c0dd81f484b754af9777370a836842e00c66026cadf3ab652bb9f069e8afd8","observation_id":"82a0f2af-030e-4ee6-b1f1-8f9caf74444b","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"First malicious mcp server found stealing emails in rogue postmark-mcp package","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:11878e9bcb4d9b0f2e1032d8ebb80b89ea5788902781ea5893ebe7bbf247d9ed","observation_id":"91400008-311c-4f1a-9f18-6fe184ba1b95","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"The platform for reliable agents","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:08fb3816c9f742dfa72539f307343decec43b71736145668d9072f4b6f9ed949","observation_id":"5520f1a4-a157-4caf-b66b-303961e78b03","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"We urgently need privilege management in mcp: A measurement of api usage in mcp ecosystems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:35c409aedd33eb4dbdd16203219f3493367efa83715967855792bbbcdc962df2","observation_id":"7b53520e-19dd-43d1-8d1f-271cf2847f97","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Getting started with model context protocol part 2: Prompts and resources","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:0ee2f09bdda81f960f6e5e91680cdce66f115e47a3344bf5ae65090d0c958635","observation_id":"cc76393b-3559-4bf0-8702-029740daca00","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"From large to mammoth: A comparative evaluation of large language models in vulnerability detection","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:9b487130ec9affed366d415de3d6d4ed436ebec140597d6f976d86f5d1ab9beb","observation_id":"56066120-5610-458c-a27d-1ff89a4fa56b","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:e2fcaf4c3b114793fc2f924023f817b33c971d1957ee157699e1b20148976fa0","observation_id":"710dd394-7125-4b51-a979-8a850645e23a","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Model context protocol servers","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:b6fef4992f08f77d46027e04e98b1f3e05911feee48a85329ebe1aef4ef49c9b","observation_id":"0d5d887d-e306-42bd-a7a5-5eb5f6e66439","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.08623","last_updated":"2025-05-02T18:26:39Z","snapshot_observed_at":"2026-08-05T10:15:59.312331Z","submitted_at":"2025-04-11T15:25:58Z","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.08623","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies.arXiv preprint arXiv:2504.08623, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2504.08623","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:e0bc3fe8452d82ce318bacbed75b23d6c36cb9230e3b07a5b3a6c27a9a61dbdb","observation_id":"f58a335b-b13e-4d6e-8546-2ac0490e1dde","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-07-06T21:15:54.445465Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:499303f7fb541928748fa6ec8bdb0a5db9799e8e464cabad1b6f5bdef12d2549","observation_id":"354a8fb7-ca85-45fb-9c5c-afa06fd12253","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Backstabber’s knife collection: A review of open source software supply chain attacks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:291b12a5aa76f8b2ae3688e8592bd908d31a16e6c1e9eade014a7ead8a7212c4","observation_id":"d9b6e08b-7845-4760-b5eb-cca54db562bc","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Function calling","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:77ee8b4d79051c8b5acbfe5397495c1ba92eb965be2b4cd5d70bb948fa62fa03","observation_id":"4ddb3e56-4233-495d-ae3d-badd469adb83","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Introducing gpt-5","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:afb976feff3bb6dc9c9c37de5f2599f5f81d564cf3f2c07df71841f645b405c9","observation_id":"819d361a-6957-4972-96cb-3c47daa3859c","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"A distributed vulnerability database for open source","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:204189ce4ed1ac25a9e7f078f6fbff4e223240abcff9e9ade952f84aecef61fc","observation_id":"64acd801-4c85-47ac-9239-6f9c938ce510","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcp server directory","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:88ca06f0742b62bbbefac2b4302a1d368a3deb0fc6fe38c52f9628d314623258","observation_id":"fde4e144-3aaa-4913-b89f-7ea4477ea9f4","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Toolllm: Facilitating large language models to master 16000+ real-world apis","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:6004834f0dd9d09da5d839c24ed33d81be7da058bed2e30176b3b9319d5f782e","observation_id":"1f887e15-9674-4a7f-8cdd-153a9fa103ef","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-04T11:49:52.391715Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcp safety audit: Llms with the model context protocol allow major security exploits.arXiv preprint arXiv:2504.03767, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:750570b2f8b6282dd31ea5bdaf1b65ca56cbaa85a8a1c7ae838e548a577bfe33","observation_id":"e5ba2086-4e33-459c-9038-efae9e526a7f","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"A survey on model context protocol: Architecture, state-of-the-art, challenges and future directions.Authorea Preprints, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:1f0c62eeec5e68eac98f369da42bf0c91dbb2b8a33adf8f6d136a02e6224b613","observation_id":"04d74758-70bd-4540-a28c-3416ec71ebd8","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Benefits of using mcp over traditional integration methods","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:63c312da5cea5f1668d6f08ad241360924a020600c10d0a5c9322e4bedc41585","observation_id":"11b0b3fe-7e88-4ae4-8136-edd6976dd837","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15219","last_updated":"2025-07-21T03:41:44Z","snapshot_observed_at":"2026-07-06T22:00:08.908202Z","submitted_at":"2025-07-21T03:41:44Z","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.15219","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Promptarmor: Simple yet effective prompt injection defenses.arXiv preprint arXiv:2507.15219, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2507.15219","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:1d99a8ed86e1bd98913b91b597b54593ffd388d541eb2bdafd4cd2a865dc4987","observation_id":"fee9b178-5543-43c9-82f8-7c5b68744202","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Smithery - turn scattered context into skills for ai","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:be588a595c8ea0c345d52cc91c29a34c9d0277fe5b14b117c5103fc3e7d8298d","observation_id":"28c19adb-dd4a-4c0c-896b-aa1eff6e33b4","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02040","last_updated":"2025-09-14T07:48:51Z","snapshot_observed_at":"2026-08-03T23:17:56.403566Z","submitted_at":"2025-05-31T08:01:11Z","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02040","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Beyond the protocol: Unveiling attack vectors in the model context protocol ecosystem.arXiv preprint arXiv:2506.02040, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2506.02040","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:b44153cec72a0d69de81d5ef89e4c3099db07cc4fc5f45866d9f0679ac818546","observation_id":"b1746f7f-5556-41d5-b84d-9c8cae56776a","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Ai-infra-guard","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:29c9603fa96a94e9608d3da64c511059477707ea9d743169d5a194aa54f421e8","observation_id":"194603bd-adf2-4a99-8555-d4075af7e884","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcpguard: Automatically detecting vulnerabilities in mcp servers.arXiv preprint arXiv:2510.23673, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:3fc001bb8f5a57bb1203d093121e370ec795480bd61f1531ffac763818417ca5","observation_id":"8efa81bb-4e16-4a59-bd49-2ea2115c1361","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Self-instruct: Aligning language models with self-generated instructions","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:50682a3c210434991b292fdec626b2ebdb7f3409db87741555dc7252f4e6eb99","observation_id":"89c44c15-37e4-4e5a-8993-65430161daed","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mpma: Preference manipulation attack against model context protocol.arXiv preprint arXiv:2505.11154, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:9aa549ad4b3d63a2362b953506b0f674be5955a1d23b1cfe9b3f5276a07e0c08","observation_id":"18acde09-b4fa-46b0-a97e-0ac24fc3cd3d","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcp-guard: A defense framework for model context protocol integrity in large language model applications.arXiv preprint arXiv:2508.10991, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:49a54a9ac41e44486c238a0d4bbbc480a82d5639e714b6dff01e1ef0b4fe230c","observation_id":"af819be4-356d-4566-8935-6d75ca950ea0","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.16736","last_updated":"2025-06-21T17:39:43Z","snapshot_observed_at":"2026-07-31T15:41:38.725206Z","submitted_at":"2025-04-23T14:07:26Z","title":"A Survey of AI Agent Protocols","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.16736","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"A survey of ai agent protocols.arXiv preprint arXiv:2504.16736, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2504.16736","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:18974ec4e15df328380047f657c840d7acaca974b8972d512ddb80b9d2d939cc","observation_id":"dd3508ee-a78f-48c5-a149-7a95a57f8744","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcpsecbench: A systematic security benchmark and playground for testing model context protocols","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:2a8d4d85ead78613222d947b362ae783e895d538845ea653d4163151db00165e","observation_id":"b1b38fdf-e8c3-428b-ad2b-e892dc5cc5fe","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:391bad1ea0ff1c8cd78ea91c767d910ff049b575f3f9b66c1776f0d1e2a45c2e","observation_id":"d2ef6289-d9ef-4194-b1f9-49a802fce7c1","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Williams","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:adf2023c9b45b0904b4edb7d67dce514ff838ef08dc9c89f10eb722eff088d90","observation_id":"862ac251-af49-4470-adaa-31cbe60db41f","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:0db04dfd0807a5fee93e354e0c51fa85858eb4f3b8c5c847c718efb911020f09","observation_id":"e4102578-c3e3-4de8-a626-36dfac48bd69","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mind your server: A systematic study of parasitic toolchain attacks on the mcp ecosystem.arXiv preprint arXiv:2509.06572, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:29179a970eb1f9f96982a9e45b9c71deaa81b3abb6ecc58e6a37cc7dc04a98e9","observation_id":"c86c3cb7-258c-4d38-81df-99d8141d6b39","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"When mcp servers attack: Taxonomy, feasibility, and mitigation.arXiv preprint arXiv:2509.24272, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:c89e96c10747f4a394b81d72fe08e24a7a228aaadde0d5359f51d18e8deb7763","observation_id":"ab21e0fa-363e-4fb1-ab04-b2da77e5beb7","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"–” in the “ID","venue":null,"work_id":null,"year":1990},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:856fbdaccd77d2dec4dd95318ead415af09675df2e657d2496306de8d4987666","observation_id":"1aff4103-fa95-4629-bf51-46b5a31232c0","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training"},"reference_resolution":{"displayed":78,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":78,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":78},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 78 of 78 outbound references and 0 inbound Pith citation observations for arXiv:2604.01904."}