{"as_of":"2026-08-04T21:29:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5bef6ec49ce95e4c7c77bc487220a7e00140165cc93d5e0de35915c759fa8b29","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T12:57:48.096929Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.10742/citation-record","integrity":"/paper/2606.10742/integrity","json":"/paper/2606.10742/citation-record.json","paper":"/paper/2606.10742"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:b2a6d6de72560c73e2ec907f9da986347b92a3fe61500728902f32b23a603412","observation_id":"f0b40ab4-bfde-4de9-9957-b0f68423859f","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:8ad3a8f3741edb1fa16b19b3ba9494e223309239d1ae9fe06cfdb525527e5710","observation_id":"8b9fb798-835a-45b1-86f0-718aee4b2549","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:b92cf30bf4df08ebaff94b8affb407503190d8603bb336813ea1eba662b3c170","observation_id":"1e33cf3f-3cde-4f72-b2d6-131c664af69b","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2023.emnlp-main.849","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:10:56.618426Z","title":"Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing , pages =","venue":null,"work_id":"822af42c-b415-4829-978d-0bdbbfa3a30b","year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:03a96ef80d4131a1e8e7b225c30a1904742565fb9e9ecafd831b205878ad4908","observation_id":"f4590032-10d9-4209-a6f6-36948f01bc4c","resolution":{"observed_at":"2026-06-27T13:10:56.620112Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:37.145668+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:37.145668+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:cc454d5583d3353e65e08fb88a9d754d10a875b12865ea820a3b0e82f0062b11","observation_id":"8e6944fe-eeb5-444e-a0e9-0c20fbbf2823","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:db4794ca056d1c3d9e7f6a91349ffd6c67ac481c7af29173ed6f09c5ccf557db","observation_id":"2e18afce-66d3-47db-b654-42d84e7a5654","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:55c109287ef7712fb3635b409647c0114f81a0c947a7bae38b4273663dd7a8ed","observation_id":"02db700d-c4bc-45f3-aa47-5c1dc7dc96a4","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.29418","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T05:57:41.942413Z","title":"arXiv preprint arXiv:2603.29418 , year =","venue":null,"work_id":"990b60d5-6811-44d8-bdb5-595e453bd694","year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:a3f57d7a92f1d98881a7e1ea94cee944f6943e8646c83b3b0b181de792374927","observation_id":"dbb23d70-4fc8-49f9-b047-6793d5756d67","resolution":{"observed_at":"2026-07-03T05:57:41.943955Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Memory Injection Attacks on","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:7e2dffddc9333b01861c9f2aa6ca84eab78f10027285e4fb8be6429606869be4","observation_id":"be6f0c75-2cd7-403f-b88f-4918e6bd0ceb","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:b237eba99a519e571634d52c959c15e9a16f7b5dc693e5d13f23d30c6a35f222","observation_id":"22470326-5237-44a9-8d5d-aa8629a9c204","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"From Storage to Steering: Memory Control Flow Attacks on","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:d9b1857f9b488ac8786eef20cd8e4e6b2efac4ace0e645ae745591ebf7bb5d04","observation_id":"920b0c5d-ac4e-4891-b2fb-7913ecdd1c07","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Memory Poisoning Attack and Defense on Memory Based","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:ce0ef13b2666a488425f9de5ce4b9b0123ff056b069644dba752600fe1a79c61","observation_id":"a9b64c62-79a6-4989-b332-7d1f9895aea8","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16130","last_updated":"2025-02-19T10:49:41Z","snapshot_observed_at":"2026-07-06T18:05:11.700127Z","submitted_at":"2024-04-24T18:38:11Z","title":"From Local to Global: A Graph RAG Approach to Query-Focused Summarization","version":2},"cited_work":{"arxiv_id":"2404.16130","doi":"10.48550/arxiv.2404.16130","metadata_source":"pith","pith_arxiv_id":"2404.16130","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"From Local to Global: A Graph RAG Approach to Query-Focused Summarization","venue":"cs.CL","work_id":"588618d7-fd41-4053-b34d-a981f8793039","year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"cited_paper":"/paper/2404.16130","citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:4b3c22f65882e3348c5b69516ab571582852ac534ef1d6d1975aadcec2bc55d9","observation_id":"51236ec2-2803-4df4-bb5f-e5add626d657","resolution":{"observed_at":"2026-06-27T13:10:56.614009Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-11T05:49:57.694079+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T05:49:57.694079+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:c1720332a9bd88cff8806af51f5b1a6bed1827d222fd189da670a9dff1437292","observation_id":"e5515499-552c-4a76-95dc-e5f5fae5fb81","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:2f295ae3777f7780bd12fcd277b945c8ff582a34923e0012ffc1771018291580","observation_id":"3450fa48-dfff-4e7f-8d06-439f0b9d0a1c","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:f56f433a34603905538b697f90d6e827ff015ecd34bf44ec731840f9f00aa068","observation_id":"c85d080a-dd82-4d92-a767-bea326a90e3e","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:71e43447946b4454f681567906fc3e8154095ffe7ccebe3d976bafa57513d5d6","observation_id":"5bba81ad-ed78-4a69-9220-b8c9f57b2fdd","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.371","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-01T09:15:43.082007Z","title":"Webvoyager: Building an end-to-end web agent with large multimodal models","venue":null,"work_id":"5549b83c-a0a2-4e60-ac23-4e941c945664","year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:a1a004bd13a4e643e9b4d5e7bd4b7f87cead7f5135fb5fdbe62131222b292293","observation_id":"475f5427-ba06-4b01-9d1a-6ae8780de2d4","resolution":{"observed_at":"2026-06-27T13:10:56.608346Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-05-24T02:24:35.193099+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T02:24:35.193099+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:526e33e8e4304f890a8caeb59d0b33c7ddcb399908ff99fa3f956d1353abe545","observation_id":"1e4f516d-2c74-48a1-af31-389c10156b43","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:6e31d2b674702415e64fee7d804db063af7c459b4ac81e29fba03dcedc0f0980","observation_id":"c1f60e76-d5c7-4a00-89fd-aa630576d906","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.acl-long.50","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T13:38:18.285940Z","title":"VisualWebArena: Evaluating multimodal agents on realistic visual web tasks","venue":null,"work_id":"7a18db33-5a35-436c-ba83-41b4602aea68","year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:93a02e95dc05442d2b8d099cd61a5a1241486b1ccdd70944dbc98f7d73eecbcf","observation_id":"08f26523-7e45-4d0f-93cc-296fea96e965","resolution":{"observed_at":"2026-06-27T13:10:56.605996Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-15T19:20:32.353486+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T19:20:32.353486+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:10b1caf17388fd0e324cce211b2353231339a265bbee6082d04840165eece125","observation_id":"a1580967-39f5-42d6-8aba-cec2364d6462","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:ac62a2bfbdcacf3bb321485af1a3e446abcb60133eafac462463dde2688a80f3","observation_id":"c46b24b5-396b-4a96-ae5f-4288d63af23b","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:b48e43f12376b40a572fa669bdc5e6a3ccec7b46c12fe3601ef151dae8e099e7","observation_id":"4a9bffdd-2297-4854-899f-d1df58044265","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Agent Security Bench (","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:53aa7256800fa8ee1ee99cab55c80599b40858f63d3135106e16041076a6791b","observation_id":"e5d14cd2-7285-4e6f-b8b8-6dfdc2f7eae0","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2024.findings-acl.624","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T00:07:27.497937Z","title":"2024 , address =","venue":"Findings of the Association for Computational Linguistics ACL 2024","work_id":"31ff5463-bfee-4ce3-9d67-bd663318c94c","year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:d33ac38128dafa866c23c25b613580aae2d1a447319c5b4f9367dcd3aec9154b","observation_id":"98245d0a-c0c9-4dd2-a28a-17e765001e4f","resolution":{"observed_at":"2026-06-27T13:10:56.617734Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-01T07:38:14.622726+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-01T07:38:14.622726+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Advances in Neural Information Processing Systems Datasets and Benchmarks Track , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:99f772e093133c81ec3d02a91218d6a5b5ebc54ad6e26737c04142e80929d430","observation_id":"aad70746-47bd-49ed-95ec-7e3c0460c1c7","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:d7c5789f80b91ae19fad05593374f347d1faef518d421e99bae31bca07bfcc4e","observation_id":"c560910d-2150-4659-a4e0-7d782a438a8f","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.1435","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:20:56.715906Z","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in","venue":null,"work_id":"55863529-d65b-481f-b638-86c8e65a2a4e","year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:08bae73d66d7d7d5b95c9c91aee7e3e58c3802a81cf7b7473e86f4ccc740d578","observation_id":"6d23fe29-bbf4-4415-8ac2-715699885a31","resolution":{"observed_at":"2026-06-27T13:10:56.610772Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2023 , eprint =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:ea2fb251e2b20582e2e36785c97fd896d6a7e77dad024ec87da731c434108c43","observation_id":"01bcc545-c687-4d5e-ae34-415a40202740","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.06445","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T02:47:49.763520Z","title":"A survey on agentic security: Applications, threats and defenses","venue":null,"work_id":"fe273365-16e4-490b-8664-965ee3967b1f","year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:44b7ec6570a8535dfa1e4b97d46f2da38f299f44b9af5a5fd9f53eaa1ed7ce8d","observation_id":"beeca118-d736-4b8e-b81c-4edd9e7fcfd3","resolution":{"observed_at":"2026-07-03T05:57:41.938634Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02623","last_updated":"2026-04-07T14:45:15Z","snapshot_observed_at":"2026-08-03T00:01:47.234806Z","submitted_at":"2026-04-03T01:25:12Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","version":2},"cited_work":{"arxiv_id":"2604.02623","doi":null,"metadata_source":"pith","pith_arxiv_id":"2604.02623","snapshot_observed_at":"2026-07-03T05:57:41.940009Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","venue":"cs.CR","work_id":"b00d3f50-24e0-4812-87e0-eb47767f463f","year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"cited_paper":"/paper/2604.02623","citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:160211328b83fc56b9c8dee03737fd64fbd4096ee190e81209f2d73a9aaf8665","observation_id":"218abb14-8f74-4be0-abde-73ca7e1e7e4e","resolution":{"observed_at":"2026-07-03T05:57:41.941287Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:02531815bad1f8b91973456240420875a60d5d1cec3293241693ef23e0d9dc49","observation_id":"fc06c7ef-478f-408c-bd85-7e24414e644b","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"Engineering Applications of Artificial Intelligence , volume =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:01c7d0985363c78dc9cfdfbb3f4632d0210fdc51f6874b346c62750de84aa5c6","observation_id":"fb5afd76-57fc-43b3-a5fb-413a8d44eb56","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:517d5b30438cca5fc19e36fa0992fb10a86ca196c104f6f488cffdca089f7ab7","observation_id":"0a8c4cac-fbd0-40a2-bf2a-12f0b163104e","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.naacl-demo.36","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T13:10:56.614716Z","title":"2025 , month = apr, address =","venue":null,"work_id":"992623ea-1db7-4db3-ab14-2834b2d12d61","year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:d43fb97a707acbcf43a56c20525c50a98d293e0dc2401a615939cf7ada5d52d8","observation_id":"ca38401d-ab92-4689-a290-715c091305bd","resolution":{"observed_at":"2026-06-27T13:10:56.615987Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:5f18c496003b3fabb4e030863c25a562f7113126713f6e5be5fbacecceb3cccc","observation_id":"fa66f752-c6d1-4fda-9160-76a0eb7ffff0","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T12:57:48.096929Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-06-27T12:57:48.096929Z"},"links":{"citing_paper":"/paper/2606.10742"},"observation_digest":"sha256:9387401b0b36dbd09f552a7ef42ff976c871251e80dbf3cdde1568a0ebe10111","observation_id":"e3b1ea8a-c8d4-4d04-99da-79c138faf9a9","resolution":{"observed_at":"2026-06-27T12:57:48.096929Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.10742","last_updated":"2026-06-09T11:53:25Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T05:39:46.750683Z","submitted_at":"2026-06-09T11:53:25Z","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":2,"unresolved":26,"verified_exact":8,"verified_fuzzy":0},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2606.10742."}