{"as_of":"2026-08-06T13:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:00643794a982a70a77a1c405a8a82f66bf9e49dcaa3301381ea1a0a9a25b7eaa","coverage":[{"denominator":53,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":53,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T21:49:08.859311Z","state":"measured"},{"denominator":53,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":53,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.15970/citation-record","integrity":"/paper/2607.15970/integrity","json":"/paper/2607.15970/citation-record.json","paper":"/paper/2607.15970"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:03.719588Z","title":"Machine learning: Trends, perspec- tives, and prospects,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:03.719588Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:957b5f88eafa8e54466ecc45c3fec4cd2641b25ad86ce4086af76e206b66d1f7","observation_id":"dc408a62-656c-438d-b04a-219c767235c6","resolution":{"observed_at":"2026-08-01T21:49:03.719588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:03.839449Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:03.839449Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:ff2c4f8eb1a66079510a6d4c0d2b1a93a809ce1a7276f671d39e3945f9208667","observation_id":"7dbea57e-71fd-4d3b-bb00-a802640bfa2c","resolution":{"observed_at":"2026-08-01T21:49:03.839449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:04.006642Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:04.006642Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:613570f973312908c431133445b330f3c4acdd78fb6141e5a5f475b1128b6043","observation_id":"2d353c98-17dd-4d79-bc8e-ac8fd3591c48","resolution":{"observed_at":"2026-08-01T21:49:04.006642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:04.127541Z","title":"Pytorch dependency poisoned,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:04.127541Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:c275471d5272207a8c46facb2a1ce4027202c9f153d5378f78e2894c29266523","observation_id":"e88826e9-cdb0-4598-8890-2f81d03a6925","resolution":{"observed_at":"2026-08-01T21:49:04.127541Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:04.245587Z","title":"Playing with fire,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:04.245587Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:944adcee5d784e33c013e87a3b9ef14a93ce3753898632a97c7e4d6f4c42d7d4","observation_id":"7a975b0c-6890-44a1-947d-535252ed147a","resolution":{"observed_at":"2026-08-01T21:49:04.245587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:04.380040Z","title":"Tensorflow ci/cd flaw,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:04.380040Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:bfab25f6b9a33c80d795f020255a692e34b2e2f5344de9a0afdb22c6a160ba26","observation_id":"ac0d6141-c98c-481f-965d-7ae402da5a34","resolution":{"observed_at":"2026-08-01T21:49:04.380040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:04.505466Z","title":"Claude code,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:04.505466Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:fbb5da092e5161cc2dc4ef948f8a9902b496dfda4caa157992546035953ebccf","observation_id":"bd5e757b-58ee-427a-b6bb-67ab57d22af8","resolution":{"observed_at":"2026-08-01T21:49:04.505466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:04.609947Z","title":"Code to detect chinese users,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:04.609947Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:d507f572f806985bc7fd9cb9a89072faa2f480a6ac51578ad522e2eafe9a743c","observation_id":"84d95416-95d9-4e86-bc04-c3f91b137905","resolution":{"observed_at":"2026-08-01T21:49:04.609947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:04.656136Z","title":"Hackers using claude,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:04.656136Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:14c4d012b5c9a34e2d24bdee280f3fc151ff102fd8cd083d58f4f1e4e831ecf1","observation_id":"dc1476f9-6472-4d1c-b01f-fc51c5f125be","resolution":{"observed_at":"2026-08-01T21:49:04.656136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:04.753517Z","title":"Property inference attacks on fully connected neural networks using permutation invariant representations,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:04.753517Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:2a418ad9180ceb4b6520772ebb15bfebc9d9e682e1b86fde8ef9ab29d32ce953","observation_id":"6b8bb2a6-436a-47c1-b78f-b9b2e4c06fdb","resolution":{"observed_at":"2026-08-01T21:49:04.753517Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:04.928155Z","title":"Leakage of dataset properties in {Multi-Party}machine learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:04.928155Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:57bdb0a7cbceba56abbee794f91a59f03fb4c1466e3a834aeeb370bcc2377cdc","observation_id":"aba1d76f-43e9-4074-92fb-8ee7ca1af42a","resolution":{"observed_at":"2026-08-01T21:49:04.928155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:05.054568Z","title":"Property inference from poisoning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:05.054568Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:e6612981b6d02c4ff5faba46122832d59da2a93f149d04427a65ccc2ecdebc55","observation_id":"49efd88d-5f31-4b02-b185-2f85f90fad29","resolution":{"observed_at":"2026-08-01T21:49:05.054568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:05.181482Z","title":"Snap: Efficient extraction of private properties with poisoning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:05.181482Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:a2892f2d761c0bd79140d70f96daaa6831380b2446d320bf9fffd84f40605cc8","observation_id":"5bba34de-0a02-4a39-898d-00e765d23411","resolution":{"observed_at":"2026-08-01T21:49:05.181482Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:05.310323Z","title":"Manipulating transfer learning for property inference,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:05.310323Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:743ccd952d9e9900d2430bb4c3b68139fb3030682f6c8c8a921f52e249730945","observation_id":"77048483-5e02-40db-9d6f-0749cd032896","resolution":{"observed_at":"2026-08-01T21:49:05.310323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:05.421044Z","title":"Blind backdoors in deep learning models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:05.421044Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:912e48bedd6b5b41e4995c15ffd01b30f3546f34d5ab411da761ec6869f3efbf","observation_id":"88cb8919-1e50-4f96-9436-aef9829e0afc","resolution":{"observed_at":"2026-08-01T21:49:05.421044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:05.539672Z","title":"Machine learning models that remember too much,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:05.539672Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:ee5d2ec8dca6d66b0f05a89f0a287c6186b12e8763809f782f78e58b686e78f7","observation_id":"7e3debec-9dea-42ad-9a6e-96f9b2a5efaf","resolution":{"observed_at":"2026-08-01T21:49:05.539672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:05.659983Z","title":"Show me your code! kill code poisoning: A lightweight method based on code naturalness,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:05.659983Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:b96cdf1aa1127f93886da35045f15aa3b6f006efd597afb08c7424d61f69d500","observation_id":"669beb75-4a3c-409f-a3cd-f84bfabc056f","resolution":{"observed_at":"2026-08-01T21:49:05.659983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:05.761867Z","title":"Loneneuron: a highly-effective feature- domain neural trojan using invisible and polymorphic watermarks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:05.761867Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:cb965873ff00884e45ccfcc42e47ec43c80401e2b4821915f9b51758e7393d3c","observation_id":"a1e75bc7-41b0-4d3d-a724-42c842c09764","resolution":{"observed_at":"2026-08-01T21:49:05.761867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:05.834053Z","title":"Your space is my zone: Demystifying the security risks of ai-powered applications on pre-trained model hubs,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:05.834053Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:aa734f1a9727e81e91ce4e979996923f9399c696380e9bc59db0a7b248d1169f","observation_id":"0307bd85-4850-4db8-a6e7-545641118a1d","resolution":{"observed_at":"2026-08-01T21:49:05.834053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.18583","last_updated":"2026-05-18T16:00:41Z","snapshot_observed_at":"2026-07-06T23:29:29.105126Z","submitted_at":"2026-05-18T16:00:41Z","title":"Overeager Coding Agents: Measuring Out-of-Scope Actions on Benign Tasks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.18583","snapshot_observed_at":"2026-08-01T21:49:05.935923Z","title":"Overeager coding agents: Measuring out-of-scope actions on benign tasks,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:05.935923Z"},"links":{"cited_paper":"/paper/2605.18583","citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:2d08e3aa6a748671d1133ac7fd60b7b48294b86c72725a6e3bc17de425dee90a","observation_id":"b5076a43-b1e0-4132-8fba-614e699890e7","resolution":{"observed_at":"2026-08-01T21:49:05.935923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.002403Z","title":"More code, less reuse: Investigating code quality and reviewer sentiment towards ai-generated pull requests,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.002403Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:38ecd09b0b8da29bc80f1ce1824ee23facea02e56b299874cab84ac7f72524de","observation_id":"2562d13b-8650-45e1-ab99-f6c3253c188a","resolution":{"observed_at":"2026-08-01T21:49:06.002403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.105990Z","title":"Hugging face,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.105990Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:2786dcf9614815752e558bd8caddf032ea7065dbb0107ff6f1c7ba2a82eb28fd","observation_id":"e7a43ee7-a20d-4037-8ec9-beb378d8510e","resolution":{"observed_at":"2026-08-01T21:49:06.105990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.202347Z","title":"Intriguing properties of adversarial training at scale,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.202347Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:97d73f2e978ffad1f69d5eef6ce20d0e3b09f1bc438f6875eb36eec460f8967f","observation_id":"26cd606c-8943-4498-943a-4b0c176f5548","resolution":{"observed_at":"2026-08-01T21:49:06.202347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.305764Z","title":"Pure noise to the rescue of insufficient data: Improving imbalanced classification by training on random noise images,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.305764Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:bef738e73028592a5bcdd0451af45b0fac311168c1f3c47804685d1eab932625","observation_id":"11bb997b-660e-4175-80b0-762eff667603","resolution":{"observed_at":"2026-08-01T21:49:06.305764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.410609Z","title":"{“Security}is not my field,{I’m}a stats{guy","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.410609Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:c94dc97841484e72e85f3b27338f7239226e4143772446fbbdf9838c6b52bdcd","observation_id":"22f90e2c-3486-4037-8bc2-8c38591ac28c","resolution":{"observed_at":"2026-08-01T21:49:06.410609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.03771","last_updated":"2020-07-14T03:42:34Z","snapshot_observed_at":"2026-07-06T08:27:58.343233Z","submitted_at":"2019-10-09T03:23:22Z","title":"HuggingFace's Transformers: State-of-the-art Natural Language Processing","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.03771","snapshot_observed_at":"2026-08-01T21:49:06.492637Z","title":"Huggingface’s trans- formers: State-of-the-art natural language processing,","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.492637Z"},"links":{"cited_paper":"/paper/1910.03771","citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:e9338e63157ddc9183224ba83c8548fb06e7a873c88f935cd587ebb407c42924","observation_id":"d8e30677-fa82-4009-85d5-e4fe6a6fbd87","resolution":{"observed_at":"2026-08-01T21:49:06.492637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.570959Z","title":"Openclaw,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.570959Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:c3ffd0b10a8dde151138d7b89925de43ed8dd9bd85e9bc7a39b6268d18eafb70","observation_id":"152294d0-fc07-44bd-920a-588673953acc","resolution":{"observed_at":"2026-08-01T21:49:06.570959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.668624Z","title":"An empirical comparison of supervised learning algorithms,","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.668624Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:764d25c8533e70c23c10da4729d33ebfee06ccc8a5085db27ffd8e0be51fa5b6","observation_id":"af876512-3407-469e-956a-30880994ddee","resolution":{"observed_at":"2026-08-01T21:49:06.668624Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.761809Z","title":"Stochastic gradient descent tricks,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.761809Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:4beb4088885e38457512e8f46dbca70adfd9d0e81d942e99c853a9af9b17b0b4","observation_id":"df4febca-b789-4cb3-bf75-67a9f68b002d","resolution":{"observed_at":"2026-08-01T21:49:06.761809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.848870Z","title":"Hacking smart machines with smarter ones: How to extract meaningful data from machine learning classifiers,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.848870Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:2da070578598f8391b6da7c8abc2e2af323ae85609715587b797f28e57d504ee","observation_id":"1d1e7de7-0ff6-42c1-88dd-314eaecabfe4","resolution":{"observed_at":"2026-08-01T21:49:06.848870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:06.950490Z","title":"Sup- port vector machines,","venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:06.950490Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:97076b5e8bc08cfaf4a25de720b2fcbb25cb48119b178d96916a2d3e01e897ac","observation_id":"6904d71c-4346-4d36-af83-ae2241856823","resolution":{"observed_at":"2026-08-01T21:49:06.950490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.043185Z","title":"Hidden markov models,","venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.043185Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:e3cd98cedfc96bde297ebee01228ab648fcf2800eccd72dc41b652dc5d1faaf3","observation_id":"776174d1-510f-46d8-9349-0ab6b1dbd21c","resolution":{"observed_at":"2026-08-01T21:49:07.043185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2001.02610","last_updated":"2020-01-08T16:45:09Z","snapshot_observed_at":"2026-08-03T09:10:41.541255Z","submitted_at":"2020-01-08T16:45:09Z","title":"iDLG: Improved Deep Leakage from Gradients","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2001.02610","snapshot_observed_at":"2026-08-01T21:49:07.116513Z","title":"idlg: Improved deep leakage from gradients,","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.116513Z"},"links":{"cited_paper":"/paper/2001.02610","citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:2add833ee150e2853afd75bbde7417f07fa49a610949c4b79a20debd514a006c","observation_id":"0a888b35-fc3b-44f4-9893-9393b8b71ddf","resolution":{"observed_at":"2026-08-01T21:49:07.116513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.185467Z","title":"Poisoning attacks against support vector machines,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.185467Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:1fdd6531b14255f606f9816b158004f0ba1ea59e1d7c990417a9455eb45ad559","observation_id":"42952e1b-f232-4db4-8c41-8fc1425acd8a","resolution":{"observed_at":"2026-08-01T21:49:07.185467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.264681Z","title":"Formalizing and estimating distribution inference risks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.264681Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:ac7baeefdbaedc4338db708973d3e02931506623437056f404f9ee3325dc62a4","observation_id":"29122d90-a985-464f-bf09-707e2a771fa5","resolution":{"observed_at":"2026-08-01T21:49:07.264681Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.369368Z","title":"Property inference attacks against gans,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.369368Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:fd394b91c55730c4f3e4ca4ab7c584faa14616fb85322dbe63d37a0535a2a6d1","observation_id":"fe7b702e-fea8-444c-90c9-4b3c6d01a6bd","resolution":{"observed_at":"2026-08-01T21:49:07.369368Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.446632Z","title":"{Inf2Guard}: An {Information-Theoretic}framework for learning{Privacy-Preserving} representations against inference attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.446632Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:41a8d534906ca1d19fbb9a08e2577868a67d7a17f1cdcaaaa09985dc91d93a0e","observation_id":"78c381ce-3061-4998-8d1c-83440876335a","resolution":{"observed_at":"2026-08-01T21:49:07.446632Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.523503Z","title":"Deep learning with differential privacy,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.523503Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:51d28db3a560b825487418e49f945a5a7b1e6357a75d197ea85d004c24794f76","observation_id":"42dbf208-3081-4c1b-9256-7a7afefd017d","resolution":{"observed_at":"2026-08-01T21:49:07.523503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.631438Z","title":"Protecting global properties of datasets with distribution privacy mechanisms,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.631438Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:6e031259da2c06e1c63e782ffa11ab6ebbc70c88e104b0b0cb41d2433b32e8d6","observation_id":"4bb2cc7f-158b-46e7-b5b2-074a5f1de14d","resolution":{"observed_at":"2026-08-01T21:49:07.631438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.700809Z","title":"“i never thought about securing my machine learning systems","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.700809Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:c285cfc3765c9530f49ebb34e41764df476efee1317f66f2c4c4a06003e1a1d4","observation_id":"6b301cc3-1cbe-4eff-bc16-a74b6fa3c5df","resolution":{"observed_at":"2026-08-01T21:49:07.700809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.799409Z","title":"Adversarial machine learning- industry perspectives,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.799409Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:ab9ccd7a81e67f61cc5bdafecfc830ad12dd52a969dbf534b64520fc2ed20563","observation_id":"2efaa084-0b65-4b40-ae4b-6f8c114daa29","resolution":{"observed_at":"2026-08-01T21:49:07.799409Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.868358Z","title":"A method to facilitate membership inference attacks in deep learning models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.868358Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:8461cbc89396f38820592c38accca9c81e641ce763170bf914bbd672fbcb3dbc","observation_id":"23481601-16b8-4a43-b1c6-7736565f8e9c","resolution":{"observed_at":"2026-08-01T21:49:07.868358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:07.923077Z","title":"Uci machine learning repository,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:07.923077Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:aadb906df63f03432d4047171d4767b646f16f3610b19786086e3a68dbd19c5e","observation_id":"63ac1036-d71b-48f7-bb5b-af1e18c96ed8","resolution":{"observed_at":"2026-08-01T21:49:07.923077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.020681Z","title":"Deep learning face attributes in the wild,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.020681Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:2ea37cbc2af4d3d4db6af900a9189a1c0892b6c30781820bd65d88ab2b33ddcb","observation_id":"543d1c1c-39e8-41fa-aebd-276eb2b76d39","resolution":{"observed_at":"2026-08-01T21:49:08.020681Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.095481Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.095481Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:dee60303eca92767f0f2240f392ce3e31a0e6a7926ef0414b565dd70e8c9d6c2","observation_id":"535bdcc3-756f-48b0-9b3f-d31da8e5201b","resolution":{"observed_at":"2026-08-01T21:49:08.095481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.191716Z","title":"Generative adversarial networks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.191716Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:6daca7772038f80dcd810c5b28de9c47a7cae574ebd2f2558e7038e3bbf4f80f","observation_id":"54686937-bb88-46c3-bb64-146a23f4da2f","resolution":{"observed_at":"2026-08-01T21:49:08.191716Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.317432Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.317432Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:d524db29421614e7eaf8b04cd6e25103e3e6fd75398841b8a5c4bde8aac3a05f","observation_id":"db96bcf0-6de2-47f5-940a-e13c35cc84e3","resolution":{"observed_at":"2026-08-01T21:49:08.317432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.395252Z","title":"Scaling rectified flow transformers for high-resolution image synthesis,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.395252Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:c5e4c11e12e46282903eeb6229a62d9d8343497cf3d17304c7956d05af6a4b6a","observation_id":"453e50be-4a4f-43de-9ee7-4561574c8865","resolution":{"observed_at":"2026-08-01T21:49:08.395252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.516808Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.516808Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:47c3ed6a05fba134e483ae1a55b17f9e2dd089a2aecb44edaa634f8a1f1960ef","observation_id":"f8b52ce6-88a2-4bd5-95de-de780bcd96f2","resolution":{"observed_at":"2026-08-01T21:49:08.516808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.592350Z","title":"Sigstore: Software signing for everybody,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.592350Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:5c5e1de9c0b7b4cb4819a6a9f5cacc53f6c00e2fd5546c559b54ac72e6eda481","observation_id":"2e8bb121-26f6-4da6-b5e7-55ab89535056","resolution":{"observed_at":"2026-08-01T21:49:08.592350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.683950Z","title":"Bandit: Security linter for python source code","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.683950Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:daaa54331f4e25d906fa6d4ccfaae38b7aa3b5b59edaeca48bce14cd05a96490","observation_id":"e808d596-83bc-4b37-b02e-f86b718d9df8","resolution":{"observed_at":"2026-08-01T21:49:08.683950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.791466Z","title":"Cytoscnpy: Fast python static analysis with rust","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.791466Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:da7e7fad031dcee31c3cddc4adbf5f2ce1d013799157a49da95053ad39020fdd","observation_id":"9150e640-64c3-47fa-a7d6-676bfec8314e","resolution":{"observed_at":"2026-08-01T21:49:08.791466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T21:49:08.859311Z","title":"Hexora: Ml-powered malicious code detection","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-01T21:49:08.859311Z"},"links":{"citing_paper":"/paper/2607.15970"},"observation_digest":"sha256:13c6ad2615599e5ebd4fb00ccf560471b10fad0ae470f3f81b7dc240af7ac98a","observation_id":"a73ed03e-f47e-467d-8171-da15160574ad","resolution":{"observed_at":"2026-08-01T21:49:08.859311Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.15970","last_updated":"2026-07-17T14:04:59Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T11:31:30.514601Z","submitted_at":"2026-07-17T14:04:59Z","title":"Code-Poisoning Property Inference Attacks"},"reference_resolution":{"displayed":53,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":53,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":53},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 0 inbound Pith citation observations for arXiv:2607.15970."}