{"as_of":"2026-08-07T04:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fbc739a117e73b51c1b057fabe8f541d32bb3e0710bf724c1ad3bf26ca1c27e9","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T00:07:43.820637Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.15143/citation-record","integrity":"/paper/2607.15143/integrity","json":"/paper/2607.15143/citation-record.json","paper":"/paper/2607.15143"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2102.06301","last_updated":"2021-02-11T22:46:17Z","snapshot_observed_at":"2026-08-06T11:09:17.858140Z","submitted_at":"2021-02-11T22:46:17Z","title":"I Know What You Imported Last Summer: A study of security threats in thePython ecosystem","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.06301","snapshot_observed_at":"2026-08-02T00:07:40.259266Z","title":"Bagmar, B","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:40.259266Z"},"links":{"cited_paper":"/paper/2102.06301","citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:13ea7bfaa5c04c8c76aef00a3367c630f5c8824981957f6c8e0af70abda55e24","observation_id":"20a797ea-05f2-4b84-aaa2-0568ad993f06","resolution":{"observed_at":"2026-08-02T00:07:40.259266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:40.328052Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:40.328052Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:55298ee355b68a835b9bf1d350ad332487a1ae0de263be7ca02393500d78cc3d","observation_id":"a471710f-d5fd-4638-aa6b-a1eb21482d7f","resolution":{"observed_at":"2026-08-02T00:07:40.328052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:40.388108Z","title":"Neupane, T","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:40.388108Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:ec19d3e9b71adb99544c1edf4829e6b548f48995e5cd82a97d070f9cd06f3457","observation_id":"b18b5207-51a5-4e40-81d5-d192d5d739a1","resolution":{"observed_at":"2026-08-02T00:07:40.388108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-02T22:52:59.046448Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.09594","snapshot_observed_at":"2026-08-02T00:07:40.428708Z","title":"Liu, C.-Y","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:40.428708Z"},"links":{"cited_paper":"/paper/2605.09594","citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:c86738a33356979a05b87fc3953a039577841c8b01d24f079dbc8ed2936592eb","observation_id":"d531ca00-90f1-4d5a-98e6-593258582531","resolution":{"observed_at":"2026-08-02T00:07:40.428708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:40.551225Z","title":"Slopsquatting: How AI hallucinations are fueling a new class of supply chain attacks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:40.551225Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:37ce9b3f902ee2181c4cb49f75658143f5d9751224f780b1ced223651154327c","observation_id":"7f16683b-cb02-4dbe-bff0-e0f2bc8ba53a","resolution":{"observed_at":"2026-08-02T00:07:40.551225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:40.696424Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:40.696424Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:a54da6ed87aa8b836ef925b7f7b2cc7403043d8b9712f102e014fc183fee7aba","observation_id":"6ee7a888-d527-441c-a8c5-03bc450be390","resolution":{"observed_at":"2026-08-02T00:07:40.696424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:40.834692Z","title":"Rules file backdoor in Copilot and Cur- sor","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:40.834692Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:82aa44c9691e908dbfad576771416520bfcb47bb48bd3e8b6195e86b2bea067a","observation_id":"9a358656-c0d5-40e3-967d-ac5dbd4037c5","resolution":{"observed_at":"2026-08-02T00:07:40.834692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:41.016396Z","title":"ToxicSkills: Malicious AI agent skills","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.016396Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:b3d3364c15b6ec6a9052ad3e7e2f9fc20abf59a920bb31dccc732cb6f2103f45","observation_id":"7677e041-b88b-4c50-909a-3e3772248dc2","resolution":{"observed_at":"2026-08-02T00:07:41.016396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:41.216929Z","title":"Prompts become shells: RCE vulnerabilities in AI agent frameworks","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.216929Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:807c56be33c9571d17284b1c12cdce38ea7fec27c9e5f887a6beb5a8c456ad95","observation_id":"42a4816a-6c00-403a-9b96-4bd68ea483ea","resolution":{"observed_at":"2026-08-02T00:07:41.216929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.17548","last_updated":"2025-01-29T10:34:13Z","snapshot_observed_at":"2026-08-05T02:25:30.955695Z","submitted_at":"2025-01-29T10:34:13Z","title":"Understanding Trust in Authentication Methods for Icelandic Digital Public Services","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.17548","snapshot_observed_at":"2026-08-02T00:07:41.281535Z","title":"Liu et al","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.281535Z"},"links":{"cited_paper":"/paper/2501.17548","citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:cf9c13d3aff52687c99d70747015b7432f85d6770fb4187c1ab58369241a9b1d","observation_id":"567f4a89-581f-488a-9b8d-007a605987c3","resolution":{"observed_at":"2026-08-02T00:07:41.281535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:41.323212Z","title":"Greshake, S","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.323212Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:90661ee79380a28728dfd04cbfc394b66298ce2bb7b7e0edba9074b3bf52deaa","observation_id":"405289d0-3a48-49b2-9530-57b29451850c","resolution":{"observed_at":"2026-08-02T00:07:41.323212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:41.361211Z","title":"Debenedetti, J","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.361211Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:8a5beb40dd3f8a5216e8d22cbdda238a45b13fe6620d0c51f2c01f9ae4d30052","observation_id":"2671d199-4b11-466b-9ef9-d475f86be228","resolution":{"observed_at":"2026-08-02T00:07:41.361211Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:41.399809Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.399809Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:900a0b3f86d1aa2c41553bcf5d3a059ae1ca7b2c1a4bfb6278f1ce0e732be915","observation_id":"aef878cc-0381-48f9-8917-241493259ed4","resolution":{"observed_at":"2026-08-02T00:07:41.399809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.19063","last_updated":"2026-06-24T06:51:06Z","snapshot_observed_at":"2026-08-04T03:58:38.279557Z","submitted_at":"2026-06-17T13:37:17Z","title":"PYPILINE: Malicious PyPI Package Detection via Suspicious API Knowledge and Agent Workflow","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.19063","snapshot_observed_at":"2026-08-02T00:07:41.536427Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.536427Z"},"links":{"cited_paper":"/paper/2606.19063","citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:55d334fd50495111e65a150a50705bdb47a2cbede50c550c7421dc2f9c6d0499","observation_id":"7c750ae6-a7e9-4713-bf62-5b186fcf09ae","resolution":{"observed_at":"2026-08-02T00:07:41.536427Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03081","last_updated":"2026-04-03T14:58:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-03T14:58:58Z","title":"Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.03081","snapshot_observed_at":"2026-08-02T00:07:41.729161Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.729161Z"},"links":{"cited_paper":"/paper/2604.03081","citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:aa42121164a9f8ecb0bef47fc86043fe9461b39d009015fcb3d0f17723887f82","observation_id":"ddf426e3-135e-4171-9a06-617d989a619a","resolution":{"observed_at":"2026-08-02T00:07:41.729161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:41.823134Z","title":"GitHub Copilot","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.823134Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:7d6007731592ddd3d2601c25a90ec7cce0d7ec90d609b37268318c8d86187818","observation_id":"7e99c0b2-77c0-4be9-98e6-b3e4c725caa2","resolution":{"observed_at":"2026-08-02T00:07:41.823134Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:41.954668Z","title":"Claude Code","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:41.954668Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:c9656f52da85e5d7aff7c10258e52776b8e3928377bf6d77ddf0408889678d41","observation_id":"b8cf1aa6-b92d-4102-b53c-43fb7d73b2e9","resolution":{"observed_at":"2026-08-02T00:07:41.954668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.061977Z","title":"Cursor: The AI-first Code Editor","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.061977Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:303b0575b83cfdb9f9254fbc0a421cd9460b459a7d1ab312e8cf7f87cd6d7747","observation_id":"5c23c82c-78c2-4921-b38d-69205bacf2b4","resolution":{"observed_at":"2026-08-02T00:07:42.061977Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.139037Z","title":"pypiserver: Minimal PyPI server","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.139037Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:13e2f19a8640fabe4409fc6f00b16f8360e757925c00fe53e22357e9aaa4c453","observation_id":"67ce9dd4-0d53-4b6f-a06d-b7cf60ac8690","resolution":{"observed_at":"2026-08-02T00:07:42.139037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.266937Z","title":"Ladisa, H","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.266937Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:0a0c7fd95d6cd7a5c9cf13bba0edfc5b64122524dfc5fa131d02c09df8260d62","observation_id":"150117ba-381f-49bf-82af-87b91aaa5f43","resolution":{"observed_at":"2026-08-02T00:07:42.266937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.338228Z","title":"Ladisa, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.338228Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:90057b5a891c96acc078f043ed91bb41863233feedb7155ed20c84731990bafb","observation_id":"4fd29975-23e3-43e2-8c47-94c3f054bc01","resolution":{"observed_at":"2026-08-02T00:07:42.338228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.450659Z","title":"Zimmermann, C.-A","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.450659Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:74b292b1c6ac9ba5aba8678ff2038ffe7eba7168a8a4c89e5911c709eb733219","observation_id":"139a9816-5abf-4aee-bbfa-d7ba8e77080d","resolution":{"observed_at":"2026-08-02T00:07:42.450659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.532837Z","title":"pip-audit: Auditing Python environ- ments and dependencies","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.532837Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:b6a6f4348e0e07c543b328dcf504f19835280fb681155942e63d21fd74a418cd","observation_id":"f6a013a4-94fb-4e1c-98b1-d1e446f36941","resolution":{"observed_at":"2026-08-02T00:07:42.532837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.627720Z","title":"Sigstore: Software signing for everyone","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.627720Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:c626c81838ab07bf99a47e422def6dc42292c0ee3bbb2dc8c80f3889b98b08f5","observation_id":"3fd86195-512a-4827-ac80-e2b2a96b1437","resolution":{"observed_at":"2026-08-02T00:07:42.627720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.737821Z","title":"Ty- posquatted npm packages used to steal cloud and CI/CD secrets","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.737821Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:db4d4cc65371685486b19896b47cefb1309f8a7a894a319b7248c75fcf205432","observation_id":"3eaf0bc4-789c-4db6-8fd7-ebc536696388","resolution":{"observed_at":"2026-08-02T00:07:42.737821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.902548Z","title":"Incident report: LiteLLM and Telnyx supply chain attack","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.902548Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:1c8c558d6203bb4d300f41869f29265eab72080d8b5da02fc8bf7708f0b52cc2","observation_id":"de6f6b0f-763d-4476-b57d-65ec7b54914e","resolution":{"observed_at":"2026-08-02T00:07:42.902548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:42.976805Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:42.976805Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:74a1d4ac0811e2086fd7e7989e63a60319f32ab34b4e830b8df364502a1c626f","observation_id":"078c4419-3ff1-4790-abe1-c1d056d0d5a8","resolution":{"observed_at":"2026-08-02T00:07:42.976805Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.081035Z","title":"PyTorch dependency confusion via torchtriton","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.081035Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:702a9aaa4b070de5aa5ffa584aa95c0f73438d55616043524e05ab21dacbeeb0","observation_id":"c047c31e-c086-4923-af22-5ddf0c57fe90","resolution":{"observed_at":"2026-08-02T00:07:43.081035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.182718Z","title":"Tschacher","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.182718Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:f0c6f5208774f1890295667893185bffad12af9f57bc336b04b58bb9a7f1ce9d","observation_id":"c895ed56-aa38-423a-bbae-8ec7807b5527","resolution":{"observed_at":"2026-08-02T00:07:43.182718Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.288294Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.288294Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:355ccc2194e2ae0603d184798ff9741758e153501688f2f4171fbfb0550c2564","observation_id":"c81f5d03-964c-4423-b9ba-7a41277b2286","resolution":{"observed_at":"2026-08-02T00:07:43.288294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.391898Z","title":"Always contribute back","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.391898Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:1f8fcbb556a45c67986b54ea866dc5cb73e89b304c4c672f186836b00969d2c1","observation_id":"a96ecf0a-d6e7-40ef-86bd-ef52df55b75f","resolution":{"observed_at":"2026-08-02T00:07:43.391898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.442331Z","title":"Fischer, K","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.442331Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:7b486f0a48559352ea9ddc22061202515fa061ef5ed6d1e7644cc417a0a67a24","observation_id":"92432a6a-0708-4bf0-99c1-03d2e4457035","resolution":{"observed_at":"2026-08-02T00:07:43.442331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.521593Z","title":"Perry, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.521593Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:a6f378c62a7977734d0af4219242fcadf2884437f9c149071f38ce7f8735c72b","observation_id":"8ee09df3-d9d6-48ba-8a17-aa3230702a47","resolution":{"observed_at":"2026-08-02T00:07:43.521593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.599755Z","title":"Singla, B","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.599755Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:e118db4125bd2b9818e158c1a47518a6f5b5ebb751994718c8a480fd8725ce72","observation_id":"07ac4253-4f05-4af0-95c3-79baee757660","resolution":{"observed_at":"2026-08-02T00:07:43.599755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.668104Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.668104Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:007c871c3d561c632060054352189cfe1edd71c73f9aff22aa1028db5d580762","observation_id":"8f22b6e4-ecd6-44e3-b08a-9e0834a658bc","resolution":{"observed_at":"2026-08-02T00:07:43.668104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.742561Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.742561Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:05392b1d4512d2d206109e5e9330a694298e75bdce233c4eedf387f6c191df57","observation_id":"7fdee5d7-753b-46fc-bb36-ba620763396d","resolution":{"observed_at":"2026-08-02T00:07:43.742561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:07:43.820637Z","title":"Default to caution. When uncertain whether an action is safe, pause and ask rather than proceed","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-02T00:07:43.820637Z"},"links":{"citing_paper":"/paper/2607.15143"},"observation_digest":"sha256:53a8e0a9e0b266ba800a0e83ca4e115bab061ec137b47ef9dd65580fd77e59dd","observation_id":"ea26f1b3-1c40-4f37-948f-83d33249fdab","resolution":{"observed_at":"2026-08-02T00:07:43.820637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.15143","last_updated":"2026-07-16T15:47:19Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T10:28:07.376830Z","submitted_at":"2026-07-16T15:47:19Z","title":"Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":37,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:2607.15143."}