{"as_of":"2026-08-04T18:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f4b8498d6bf4ba1a30a7a46f72eb6cab97ae5a010e725a2c9cd8e8aadcd966fe","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-12T01:28:24.949110Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2605.08310/citation-record","integrity":"/paper/2605.08310/integrity","json":"/paper/2605.08310/citation-record.json","paper":"/paper/2605.08310"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agent S: An open agentic framework that uses computers like a human","venue":null,"work_id":"f7bbf32b-ff29-4001-96e3-f453bfa630cf","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:c922dc4120f3b231c8708d2cb6ebcae95ecdae365f447d2b46cb07b745ace169","observation_id":"55f3669c-4032-43aa-baad-ac67d440df44","resolution":{"observed_at":"2026-05-14T07:04:27.020610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Windows agent arena: Evaluating multi-modal OS agents at scale","venue":null,"work_id":"37eef034-dae0-496a-bd5b-cb39817e6daf","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:a4f3280c830e36a4468a65a0905ede552c914f18c79a27dc46d22611d4ccc226","observation_id":"26633a37-867c-4544-aebe-f58b20032ad5","resolution":{"observed_at":"2026-05-14T07:04:26.987974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.emnlp-main.372","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"TopicAttack: An indi- rect prompt injection attack via topic transition","venue":null,"work_id":"3fd89694-8a5e-487c-bd45-d304ba3ff33c","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:26821236940bf6895ad60ab121b401c6b81dd1edf1ec2158d2d9e82da391a266","observation_id":"01c32977-7dee-4939-bed4-5478ee51a58d","resolution":{"observed_at":"2026-05-12T01:31:14.613071Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.890","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"0a8173b6-7469-45cf-a7ce-022e8ed229a5","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:31a0541375dae0c851636c79d70c418502524a1abeb136b2a78676bc00226930","observation_id":"c3da176b-9abc-4be9-b5d2-df25d2aabffe","resolution":{"observed_at":"2026-05-12T01:31:14.541990Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.897","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-30T00:24:03.901442Z","title":"Defense against prompt injection attack by leveraging attack techniques","venue":null,"work_id":"0a8ee254-850a-4744-a641-4c08c324f8d6","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:53e1250bc3029383f2671047dc7ac54bfc3faff5895d812a94f0542a60227fbb","observation_id":"98dd598b-cca1-4373-830b-cb9cf76e3548","resolution":{"observed_at":"2026-05-12T01:31:14.601218Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"AgentDojo: A dynamic environment to evaluate prompt injec- tion attacks and defenses for LLM agents","venue":null,"work_id":"5f7f6209-ff74-41e7-b1e3-cc07d2006c38","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:1a5de077c9be89553eb748885b8596521b8a899f85e0c6c4349c3977ff06b75d","observation_id":"93b172c3-0567-4926-a289-2c4361e9b952","resolution":{"observed_at":"2026-05-14T07:04:26.973448Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":"2412.19437","doi":"10.1016/j.neucom.2023.127063.url:https://www.sciencedirect","metadata_source":"pith","pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"DeepSeek-V3 Technical Report","venue":"cs.CL","work_id":"57d2791d-2219-4c31-a077-afc04b12a75c","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:3f0aad24580b2ba796aab6db1f8c2c14cf369f25e1dfb62c37924d36d8f6bf10","observation_id":"507f81a6-756f-41cf-89d1-19b7cd390899","resolution":{"observed_at":"2026-05-12T07:56:30.670662Z","resolver_source":"local_arxiv","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mind2Web: Towards a generalist agent for the web","venue":null,"work_id":"5319e7cf-47a5-4767-aaf0-47de72e788c8","year":2023},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:8ffb04e45a43fd56b15fafdd73c480be2bc0bf1dfa0223a9128462062e44659c","observation_id":"a8700e29-55f4-4dff-9672-ee288377f18c","resolution":{"observed_at":"2026-05-14T07:04:27.014176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Laradji, Manuel Del Verme, Tom Marty, David Vazquez, Nicolas Chapados, and Alexandre Lacoste","venue":null,"work_id":"abc15f4c-0a2e-4c54-b611-8e57e089de07","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:cebc5d49fb81fe1c127c42d06660c9861ab4709629ffd64f2ba65e5845042538","observation_id":"02598e6e-3121-4d60-bf04-06c34a69f2a0","resolution":{"observed_at":"2026-05-14T07:04:27.018471Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"WASP: Benchmarking web agent security against prompt injection attacks","venue":null,"work_id":"9fe3ed6b-4db3-4737-81b6-55cd8a6ffb79","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:a871843928c92f64d3392c1a3bba840e83ce57e2dd6cd68c6e833b9f1e72ff2a","observation_id":"90209d57-c992-40b0-b56e-5e6f90da3bb7","resolution":{"observed_at":"2026-05-14T07:04:26.981127Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06261","last_updated":"2025-12-19T14:25:46Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-07T17:36:04Z","title":"Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities","version":6},"cited_work":{"arxiv_id":"2507.06261","doi":"10.48550/arxiv.2503.19","metadata_source":"pith","pith_arxiv_id":"2507.06261","snapshot_observed_at":"2026-07-11T03:17:51.364436Z","title":"Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities","venue":"cs.CL","work_id":"008df105-2fdd-45d8-857a-8e35868aecb6","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"cited_paper":"/paper/2507.06261","citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:11f7ad5d80c9eacfe0127f6407b6a9151c20a2f37a39efdd488de59e877c7b69","observation_id":"58d39848-a956-406e-831a-082dfab2ddf5","resolution":{"observed_at":"2026-05-12T01:31:14.593551Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.06471","last_updated":"2025-08-08T17:21:06Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-08T17:21:06Z","title":"GLM-4.5: Agentic, Reasoning, and Coding (ARC) Foundation Models","version":1},"cited_work":{"arxiv_id":"2508.06471","doi":"10.48550/arxiv.2508.06471","metadata_source":"pith","pith_arxiv_id":"2508.06471","snapshot_observed_at":"2026-07-11T01:07:44.097694Z","title":"GLM-4.5: Agentic, Reasoning, and Coding (ARC) Foundation Models","venue":"cs.CL","work_id":"5bb4e5d7-985e-431b-bb0d-75576cdc2950","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"cited_paper":"/paper/2508.06471","citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:a4f7d283d06fb493717ed7cfe84688f50041bda148db34ea27ec72d86ed6409c","observation_id":"d307ed24-7288-4b6a-aff3-9da63e61ae39","resolution":{"observed_at":"2026-05-12T01:31:14.577092Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-05-23T05:23:01.474969+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-23T05:23:01.474969+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"5764.362398","doi":"10.1145/3605764.3623985","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec @ CCS 2023)","venue":null,"work_id":"0b235739-d106-431c-aed9-3675d531c886","year":2023},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:4bdf8b65f143c2c6b546c76ec35d446e048c2500000e56572a4ddc7b2949cd25","observation_id":"e855f1e5-2995-428d-a599-7ec47468be9b","resolution":{"observed_at":"2026-05-12T01:31:14.558696Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-12T05:19:17.163767+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T05:19:17.163767+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-031-73113-6_10","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OmniACT: A dataset and benchmark for enabling multimodal generalist autonomous agents for desktop and web","venue":null,"work_id":"93fc3d95-8748-4b5f-91dc-b8583836df07","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:5f518d97bdcb5b90b0f763a75c4394edc188942daf25b4cd48e53517fe4b5a98","observation_id":"a36d97d9-e117-4b7b-800a-be038e5c0697","resolution":{"observed_at":"2026-05-12T01:31:14.608395Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-15T19:20:31.94115+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T19:20:31.94115+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.20534","last_updated":"2026-02-03T04:57:00Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-28T05:35:43Z","title":"Kimi K2: Open Agentic Intelligence","version":2},"cited_work":{"arxiv_id":"2507.20534","doi":"10.1145/3448609","metadata_source":"pith","pith_arxiv_id":"2507.20534","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Kimi K2: Open Agentic Intelligence","venue":"cs.LG","work_id":"7f18284c-12d3-4137-bea1-1da97e8cf3c1","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"cited_paper":"/paper/2507.20534","citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:03e9c34c766fdad18dd72b3539efde25102f0b10bc5f7e411beb82ad28feada6","observation_id":"e4116845-6f23-43a0-892e-3c91890f0298","resolution":{"observed_at":"2026-05-12T07:56:30.684123Z","resolver_source":"local_arxiv","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-05-25T01:23:16.170083+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T01:23:16.170083+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.50","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T13:38:18.285940Z","title":"VisualWebArena: Evaluating multimodal agents on realistic visual web tasks","venue":null,"work_id":"7a18db33-5a35-436c-ba83-41b4602aea68","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:fcb727b3b30c8d15c233afd57613742922e583a6398c17a09b18afd6d8b20c65","observation_id":"34283d37-f678-4b8d-9bb5-254223359874","resolution":{"observed_at":"2026-05-12T01:31:14.565722Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-15T19:20:32.353486+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T19:20:32.353486+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"EIA: Environmental injection attack on generalist web agents for privacy leakage","venue":null,"work_id":"fa6daf1d-ee40-4ec3-9d36-dc4e03412515","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:4917b8ecd04475da9288d4bfff47450363e106e3d09a7d811289578a5fafbb50","observation_id":"9ea17904-563b-44ca-a084-a63c5c95ca91","resolution":{"observed_at":"2026-05-14T07:04:26.971553Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1162/tacl_a_00638","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T03:27:45.037248Z","title":"Liu, Kevin Lin, John Hewitt, Ashwin Paranjape, Michele Bevilacqua, Fabio Petroni, and Percy Liang","venue":"Transactions of the Association for Computational Linguistics","work_id":"9c9c91f9-a321-4e33-8897-d66f6ad0f659","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:fa5af9309f29e68dcf39792e10b29dc539c5b264d58f4460aaf34101674d5955","observation_id":"21b8ba45-daee-4402-b408-58511445ba0a","resolution":{"observed_at":"2026-05-12T01:31:14.547604Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-11T01:49:34.34815+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T01:49:34.34815+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"AgentBench: Evaluating LLMs as agents","venue":null,"work_id":"7362f28a-5903-486e-b183-88d3f24af5d3","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:44777d65c62178ff4555bc83707ed9bcd23fefc10bb4fa5149546121e475c783","observation_id":"d152b9e4-8f67-4c0e-b702-26e28a5faae7","resolution":{"observed_at":"2026-05-14T07:04:27.011941Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Formalizing and benchmarking prompt injection attacks and defenses","venue":null,"work_id":"7ec46c9e-b3a6-4d13-9b37-dd1c0d46a894","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:c8203a7f5bb861d200c9b906b9750de63f040eb07e9dcf3611e77e570ea25318","observation_id":"d11e2c82-5c7d-43f4-b6ff-d7390c1c8674","resolution":{"observed_at":"2026-05-14T07:04:26.977164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"WebLINX: Real-world website navigation with multi-turn dialogue","venue":null,"work_id":"41fe676a-3e5a-47e0-94f2-460673ed0758","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:720755e2d3b6db4b1edac44cdbf590b97e145f386f2926d6fb28321c4e615e14","observation_id":"db60e35d-ebb4-49ad-8bf6-4c91da86186b","resolution":{"observed_at":"2026-05-14T07:04:26.993247Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OSWorld: Benchmarking multimodal agents for open-ended tasks in real computer environments","venue":null,"work_id":"3813c64e-d450-4c11-b6f7-cd7cc90b5792","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:28e04288b4f8691b456569d6762e243afc5d8edb1fa713e28a69e95b98115bd2","observation_id":"d0605330-31b3-4876-8994-8e469a52aefe","resolution":{"observed_at":"2026-05-14T07:04:27.016368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":"2505.09388","doi":"10.1016/j.aiopen.2022.12","metadata_source":"pith","pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Qwen3 Technical Report","venue":"cs.CL","work_id":"25a4e30c-1232-48e7-9925-02fa12ba7c9e","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:0d73ec72d46bb1d9dff8bacc4146d570712cb51cc3edfecb44504c5723e8042e","observation_id":"ad96b5f2-1760-447b-b0f3-bab0e24bc2ac","resolution":{"observed_at":"2026-05-12T01:31:14.588113Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"0624.370917","doi":"10.1145/3690624.3709171","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1 , pages =","venue":null,"work_id":"70d41772-c3cc-43c9-9c0c-df56285f9e0b","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:bc572367cad19ce797029c356d12a6aa99f10c37cfb1fb07d65d0e098347c987","observation_id":"a74cdaa3-a4f4-48de-bd5f-fa032e877072","resolution":{"observed_at":"2026-05-12T01:31:14.534579Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.emnlp-main.505","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T23:05:44.144413Z","title":"AssistantBench: Can Web Agents Solve Realistic and Time-Consuming Tasks? , booktitle =","venue":null,"work_id":"c0b8e39c-2c06-4afa-9c70-0abb60d20293","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:375245103ed0a1aa92c0a99fa43c1887fa37589ce3d9f2d4607ce14fa382b44b","observation_id":"2382f221-3801-490b-8632-8b34b3db53a7","resolution":{"observed_at":"2026-05-12T01:31:14.604626Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-11T07:49:09.544257+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T07:49:09.544257+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:17:03.600265Z","title":"In: Zong, C., Xia, F., Li, W., Navigli, R","venue":null,"work_id":"8d675bdd-79ca-48d6-9163-fc17ce0e8ece","year":2024},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:41be72943a1fe5000cf797245f5aad1b121788cbc9d79c83779cbbb96c7855d0","observation_id":"ac81e2c9-bd73-4d1d-93c5-fb38873be7a9","resolution":{"observed_at":"2026-05-12T01:31:14.538635Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agent Security Bench (ASB): Formalizing and benchmarking attacks and defenses in LLM-based agents","venue":null,"work_id":"1acaaeff-999f-43d9-aece-5db05af1b22b","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:24eed4d0d2b2d02a4f1da417508c2fcab218e60b64e885fa934f2569cc4c83b9","observation_id":"eb4ad19b-bdba-45c9-b6c2-3f9d46fe004e","resolution":{"observed_at":"2026-05-14T07:04:26.995435Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.411","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":"8435d15a-a18a-41d1-b0b4-8099400b1110","year":2025},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:4d1a93cc45b7595f614b2f0d2f1576140d3a434decc578e5398fcc0876550ad5","observation_id":"35db9db4-c7cf-47fa-8eef-f267f499ea5c","resolution":{"observed_at":"2026-05-12T01:31:14.619719Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Xu, Hao Zhu, Xuhui Zhou, Robert Lo, Abishek Sridhar, Xianyi Cheng, Tianyue Ou, Yonatan Bisk, Daniel Fried, Uri Alon, and Graham Neubig","venue":null,"work_id":"3f3b7622-f751-4be1-bd9d-749b2efe1b20","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:eacb39ce2e293aa87852c9be5b9f1632eac5a92d078a670cd7b924b3e804ce89","observation_id":"f758a45d-abac-4172-a821-5caeb324b610","resolution":{"observed_at":"2026-05-14T07:04:27.005323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"12 Appendix Table of contents A WebTrap algorithm and prompts14 A.1 Full attack algorithm","venue":null,"work_id":"5e5e06cc-1ad3-4de3-8bf1-275fb7783615","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:552b428b2894e037ee2e5904d318d042b4f371a006ef24cb55dd972d85f9e991","observation_id":"965f5401-8d95-4451-bf05-8dfa793ff2e4","resolution":{"observed_at":"2026-05-14T07:04:27.007479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"It does not expose the true attacker goal and appears simply as normal, environment-related navigation guidance","venue":null,"work_id":"e3437696-b368-4e41-9373-261fda672e80","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:59d0d9dd8ff9d64abb784398b9bdab42c40fee704952cb42f33360d327affa3e","observation_id":"4a29b4da-5df5-4bb2-86f7-115f1e00b25c","resolution":{"observed_at":"2026-05-14T07:04:26.984699Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"It packages the attacker goal as a necessary prerequisite for the user goal and continues guiding the agent toward the payload injection point","venue":null,"work_id":"de611a76-be26-4b62-9377-dadabbc359fc","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:7751e06512981144170cef25d7262881b946cab9e775a3914e6f10ff7ba7f7e5","observation_id":"4449de97-4b42-4dff-8fc9-9a7542f2319c","resolution":{"observed_at":"2026-05-14T07:04:26.975221Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"{detour_root_label}","venue":null,"work_id":"796a8ea3-eaa5-4676-8cd0-f83bd951b37a","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:7f0e30fbe87500e1ae3b58b4f318f811f13eb1924046c6ee8fc4740c0a33167a","observation_id":"4975d369-62fe-49b6-956e-d7e504425593","resolution":{"observed_at":"2026-05-14T07:04:26.997451Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"{click_1_label}","venue":null,"work_id":"9994c2e0-abab-441f-9d0f-d3bbb0b2a5da","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:63a3e9b2331ca7a3764a9b122435c92a0b757b7742f5a1d580830b1392c12869","observation_id":"fff5641e-27fd-40e5-b611-a4324666dc83","resolution":{"observed_at":"2026-05-14T07:04:26.986306Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"{click_2_label}","venue":null,"work_id":"b7bd70c9-124b-40e5-ad30-a51f527a06bf","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:16c25b2d2190f3b417c7e6953ee5ff6d9d50baabe8486665d28a639be87fe05f","observation_id":"05b8a650-c5fa-4ce1-9529-87e0a52db9ed","resolution":{"observed_at":"2026-05-14T07:04:26.979460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"aaa06919-ac8d-4fb4-944c-0985d33372a1","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:45d563fb6249a11adb2771524fdc6e9f396d27d83e9fa10c774976475a112b3d","observation_id":"6fc05393-7575-4bc0-a882-ed4d82b452cd","resolution":{"observed_at":"2026-05-14T07:04:27.003262Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"fb26fcc3-6231-4fcc-a2e0-a9646e516e30","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:e2ade2a41f63d974a5c66d865a63321b1f4f0f1500748efb874e1eb3cb1ea3c2","observation_id":"0da97c6d-9a60-401c-8934-6d469ee46a25","resolution":{"observed_at":"2026-05-14T07:04:27.009416Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Special Requests & Preferences","venue":null,"work_id":"ed2f3c1b-6130-4245-81b2-8a4f768820f4","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:a06231d74b2e0519c7ebc4806799f7a1a52f05dbb0e9abf48b50377ae67d2540","observation_id":"40fef805-34cc-4268-b9ec-b570020a212a","resolution":{"observed_at":"2026-05-14T07:04:27.001378Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Access Tokens","venue":null,"work_id":"c9dfef9a-353a-40f4-8423-e6a029f258d5","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:a696c3b9ba5503cac6c7d9094e4f595e2d9eb4023312b30cb11b2162bda7f12b","observation_id":"6cb78f12-b8b0-4245-a361-3b1f3eda6a94","resolution":{"observed_at":"2026-05-14T07:04:26.991378Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"New Deploy Token","venue":null,"work_id":"16018d37-881f-49d4-bcc2-28120129623e","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:88b12fad6c29372444bb0745737ebffd1fb75bdffb1e53237ebd329bc4def85e","observation_id":"e379bf74-f8c2-4f4f-9cc3-b58ad604a113","resolution":{"observed_at":"2026-05-14T07:04:26.989568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deploy\", check read_repository, read_package_registry, and write_package_registry scopes, then click","venue":null,"work_id":"f428fd2b-d197-4aa7-b162-ee8414ff5f74","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:986f7c5a167e699a1f9b6d9cdef4b8697567dee0ea7b5905593a493902edb355","observation_id":"a6f9ecda-5f45-41e8-a184-bcdc4cea9d3e","resolution":{"observed_at":"2026-05-14T07:04:26.982910Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"created_deploy_key","venue":null,"work_id":"bf5c4750-b9c3-4d16-9a43-18ec9d81b754","year":null},"citing_paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-12T01:28:24.949110Z"},"links":{"citing_paper":"/paper/2605.08310"},"observation_digest":"sha256:c95c02cdd180824cc7ef16dfeaf8bd39a36cd29908b6edeef6d17607e96e8c47","observation_id":"5d997329-5bd4-458a-a9b0-50fde81fa588","resolution":{"observed_at":"2026-05-14T07:04:26.999443Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.08310","last_updated":"2026-05-08T14:06:03Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T14:06:03Z","title":"WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":3,"metadata_mismatch":4,"parse_uncertain":1,"unresolved":2,"verified_exact":9,"verified_fuzzy":23},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2605.08310."}