{"as_of":"2026-08-08T01:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4c940941cad66296affc818a625686d910f916469943e365cca474805ef4a65e","coverage":[{"denominator":77,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":77,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T17:51:45.801965Z","state":"measured"},{"denominator":77,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":77,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.17503/citation-record","integrity":"/paper/2607.17503/integrity","json":"/paper/2607.17503/citation-record.json","paper":"/paper/2607.17503"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.556488Z","title":"Hugging face – the ai community building the future","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.556488Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:998139aeb6e2077bfc9a970284f5a10d306fe456a00aa3cd537734151411fba9","observation_id":"35704110-02a4-490e-8a77-9f0b6f86a560","resolution":{"observed_at":"2026-08-01T17:51:45.556488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.562913Z","title":null,"venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.562913Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:6cdce2df6255b824fb2e7746e096847b9705250949cfb39bc48d0bdc705a5a2f","observation_id":"1c0647a8-2662-4b70-8566-318c6be61e8f","resolution":{"observed_at":"2026-08-01T17:51:45.562913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.566381Z","title":"Opencsg,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.566381Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:05951b04a04776617a059a4931a70c11fe9486f1897edd69895c1761d54c15a4","observation_id":"1b43a903-09a4-4a74-aa94-6ebe76b1aabc","resolution":{"observed_at":"2026-08-01T17:51:45.566381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.570126Z","title":"Modelscope,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.570126Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b618b3b39a5cb6ace5a52ac69975259c7ae73ee425e67898cc81eaabe4a7a06f","observation_id":"017c25f6-2a97-4a15-a96f-1f1c02029f67","resolution":{"observed_at":"2026-08-01T17:51:45.570126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.573101Z","title":"nvidia/nemotron-cascade-2-30b-a3b - hugging face,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.573101Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:a4ca0be0a9542329584130f58ab372246025a4b7435b32f8bf965dd8a0006a29","observation_id":"62f5d65a-0455-4aca-a766-2f609f20280f","resolution":{"observed_at":"2026-08-01T17:51:45.573101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.576408Z","title":"google/gemma-4-31b-it - hugging face,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.576408Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:4f149d7e861966489d9f21bf828677f9b9c61a64be1442d36071c85cd613d3aa","observation_id":"4223c188-4e34-4ad0-9152-6444406b1e12","resolution":{"observed_at":"2026-08-01T17:51:45.576408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.579743Z","title":"microsoft/harrier-oss-v1-0.6b - hugging face,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.579743Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:41cad948aba0cb640dd7f678bb715c9f3fd45486d546326858d4efd64310219c","observation_id":"22efd49b-0d6e-4073-93b4-681fb061d101","resolution":{"observed_at":"2026-08-01T17:51:45.579743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.582579Z","title":"openai/gpt-oss-120b - hugging face,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.582579Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:0b1b0e458f0d15e2386b029c9477ed7c39364acfb289bb926cca7fd3b1b151f5","observation_id":"747f71a9-522a-468a-a9b4-ea267f769e85","resolution":{"observed_at":"2026-08-01T17:51:45.582579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.585259Z","title":"[Online]","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.585259Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:908f3d24753d19006ac382168a2b9ae384531d6241b66b47e9bb3c3aac99f3d9","observation_id":"56e11e20-98bc-4414-8737-f2fbc4e34308","resolution":{"observed_at":"2026-08-01T17:51:45.585259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.588118Z","title":"Data scientists targeted by malicious hugging face ml models with silent backdoor,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.588118Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:474bd496d6702c79d70e663ef093c642d9190da3573d249f5b104468955c8e7e","observation_id":"8b6fa409-d1c0-43a9-83bd-5592b03d0745","resolution":{"observed_at":"2026-08-01T17:51:45.588118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.590992Z","title":"Models are codes: Towards measuring malicious code poisoning attacks on pre-trained model hubs,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.590992Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b8c6ed454b7928fe52291955ef7cf0a955fde6f1284bd0dcff9ee5291e46f337","observation_id":"5c8cc722-3874-4a1b-8122-bb964bedc8d5","resolution":{"observed_at":"2026-08-01T17:51:45.590992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.593984Z","title":"Third-party scanner: Jfrog,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.593984Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:934a79b2553b959ffddb3afec4413baa7bdb6632c6ffcf76d327b153fbff719b","observation_id":"319abae0-f1a3-4820-aee5-9930b2e825ea","resolution":{"observed_at":"2026-08-01T17:51:45.593984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.596831Z","title":"third-party scanner: protect ai,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.596831Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8b7b4e628d6149a9087cfde40766bdf0308e759ea4e30955ef7b32c11d68a90e","observation_id":"6c4f80cb-4ea4-4aa6-b44b-e6890312526e","resolution":{"observed_at":"2026-08-01T17:51:45.596831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.599762Z","title":"pickle scanning (hub documentation),","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.599762Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:d41a97538707c1b747a5523f05eeb30c9653d7d7db1ecdba581699cbc7b1668a","observation_id":"e7becbb0-4d01-43bb-a65e-fdf28873428f","resolution":{"observed_at":"2026-08-01T17:51:45.599762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.603036Z","title":"Hugging face and virustotal collaborate to strengthen ai security,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.603036Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:6ab605463947257c9e2a9f876297e35be3f475c4fb16dfc64171b679e06c0288","observation_id":"6f42939d-e4ec-4b0b-81cc-e638829d2195","resolution":{"observed_at":"2026-08-01T17:51:45.603036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.606194Z","title":"Gentel - home,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.606194Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:830825ab863b3812a226295b876842cfa607536b3784c21b06c2425425d7b25b","observation_id":"8f5e7171-cec4-47cc-a9cf-c6d0a71a9b01","resolution":{"observed_at":"2026-08-01T17:51:45.606194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.609086Z","title":"Opencsg - gentel example,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.609086Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:71a0100ebd049d3b323ccd0f19809d5e477951c3a83a3086b2a1ba6fb8e1b9c3","observation_id":"1bab09cc-e0fe-4892-ac54-2a2f46b5a60d","resolution":{"observed_at":"2026-08-01T17:51:45.609086Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.612129Z","title":"Malicious ml models discovered on hugging face platform - reversinglabs,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.612129Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8471d241aff4701a60c9d668db2be6b4fc759bcf2708922c4279e570f52af4ae","observation_id":"4702497d-999b-42a1-993a-b9c7f636a464","resolution":{"observed_at":"2026-08-01T17:51:45.612129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.615475Z","title":"4m models scanned: Protect ai + hugging face 6 months in,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.615475Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:2fd9466e87efb9fbf650f7004f81d59cc756135a18f366bc2fd0e326612975cc","observation_id":"63f68c1d-733f-47e4-a6ce-571ad899fda2","resolution":{"observed_at":"2026-08-01T17:51:45.615475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.618725Z","title":"New hugging face vulnerability exposes ai models to supply chain attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.618725Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:30ec92e70cd2064ab6176bc275dbf2afd4801d4779a8bac0240f6514c7007168","observation_id":"0839cc4f-7c5e-4685-a27a-29b38abc3be4","resolution":{"observed_at":"2026-08-01T17:51:45.618725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.621808Z","title":"Over 100 malicious ai/ml models found on hugging face platform,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.621808Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:5bbf053107ccee1679a0e8f343991b052b208e3328c02d92a04e8f64155098f9","observation_id":"b956acbf-faac-41f9-8898-7c6ffbf3a753","resolution":{"observed_at":"2026-08-01T17:51:45.621808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.625425Z","title":"Malicious ml models on hugging face leverage broken pickle format to evade detection,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.625425Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:0e842d50a869917f08b5ff0aa2fe8ead7d10c0c3a09ac547e46e5578bf8d7110","observation_id":"2fed1bb0-caa6-40fd-a107-b46fe5d68d02","resolution":{"observed_at":"2026-08-01T17:51:45.625425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.629111Z","title":"Montalbano, https://www.darkreading.com/application-security/hugg ing-face-ai-platform-100-malicious-code-execution-models, Feb 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.629111Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:cf8d324292cdc7035da9f34f47bd13073bdc391bcfb3c52cdcf3fe0f2035ce59","observation_id":"b449cfb2-2b28-42ce-b244-cfa52a17e419","resolution":{"observed_at":"2026-08-01T17:51:45.629111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.632539Z","title":"Malicious AI Models on Hugging Face Exploit Novel A ttack Technique,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.632539Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:1a9a468c07bd14819cf00cd24b0a6170b3a845763c27c5acc956a19560e16863","observation_id":"35ee187d-367c-441d-83ba-1e685cb1947f","resolution":{"observed_at":"2026-08-01T17:51:45.632539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.635735Z","title":"Federal Register :: Request Access,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.635735Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:acad053a5c65123143774cb35afb06180b635544c9b350b10858b5432b59fce0","observation_id":"f3dc4bf0-c1bc-45f2-85c7-c640cfbfa57f","resolution":{"observed_at":"2026-08-01T17:51:45.635735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.638812Z","title":"cve.org,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.638812Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:afb831f387eb09a594c1a413db7441d2998906097e86c98dbdfe57df06ef9800","observation_id":"6a67299c-50e7-4d1d-92de-cebe6156b954","resolution":{"observed_at":"2026-08-01T17:51:45.638812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.641819Z","title":"Pickleball: Secure deserialization of pickle-based machine learning models (extended report),","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.641819Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:571b86ed5ae807055a8565c1aa4e2eff4896edbe6bbe9d9f3ea9f5f458efcf07","observation_id":"28c8b31d-0526-4b30-91fa-103d499fd6cd","resolution":{"observed_at":"2026-08-01T17:51:45.641819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.644897Z","title":"How to make hugging face to hug worms: Discovering and exploiting unsafe pickle.loads over pre-trained large model hubs - blackhat asia 2024,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.644897Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:4f3c89047e4704ce68bc750b0f44bbd6fb0a434431d1879894fbd31c4f68509b","observation_id":"70ac1f57-73a5-4e00-8eac-3d37e71aa330","resolution":{"observed_at":"2026-08-01T17:51:45.644897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.648185Z","title":"coldwaterq/sectest - model card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.648185Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8aaabbbfdf57b095f9fc080770e55cb25770925cf4ca7382815de0a3fdbd43aa","observation_id":"844b3273-6508-4e71-a5d3-a7c69ad07e81","resolution":{"observed_at":"2026-08-01T17:51:45.648185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.650957Z","title":"zpbrent/reuse - model card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.650957Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:ec7d1a12276e35557101d1ee87c6a4a1d7c08cd221d1a8a002f743146f435ad2","observation_id":"f99c6456-ae88-4521-b942-ca6b4018cdb8","resolution":{"observed_at":"2026-08-01T17:51:45.650957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-05T15:32:04.135703Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.19774","snapshot_observed_at":"2026-08-01T17:51:45.653822Z","title":"The art of hide and seek: Making pickle-based model supply chain poisoning stealthy again,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.653822Z"},"links":{"cited_paper":"/paper/2508.19774","citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8316429b2846925d373e5a6260262f4bf9e85d1488cd3010cbe95b0e78919146","observation_id":"aa0daeb5-56d7-41bd-a796-603606263552","resolution":{"observed_at":"2026-08-01T17:51:45.653822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.657190Z","title":"Backdooring pickles: A decade only made things worse - defcon 30,","venue":null,"work_id":null,"year":2030},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.657190Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:da112446d5d1402d403612abe5e30e5f46cbdc2d20f474c4c9b6fa040a459c1d","observation_id":"fd23ad54-185a-42de-bb37-c60e4f21fc18","resolution":{"observed_at":"2026-08-01T17:51:45.657190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.660445Z","title":"Sour pickles - blackhat us 2011,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.660445Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:fe1f669042129007a8ad2c2eacf70ccabb4f79f54139279a1261a378da5c2bb5","observation_id":"a09626da-0e74-47cc-8bf5-2f4612cecf5e","resolution":{"observed_at":"2026-08-01T17:51:45.660445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.663518Z","title":"Cwe - cwe-502: Deserialization of untrusted data (4.20),","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.663518Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:1779490e54b371f465e9492ca090e50170bbdbbc4d42dbe66bac9ab324f63c7a","observation_id":"22965169-f133-46b6-9339-3e35f41320ea","resolution":{"observed_at":"2026-08-01T17:51:45.663518Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.666137Z","title":"flawed.net.nz — flawed.net.nz,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.666137Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8e7b1979238e485ccdfae8e41b92fb562441ad05e4d8cf48563604af18619dc6","observation_id":"8f041be5-e4b1-45c7-8174-9e24883bc11c","resolution":{"observed_at":"2026-08-01T17:51:45.666137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.669286Z","title":"Secure pypi? the problem with trusting open source reposi- tories — activestate.com,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.669286Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:78d15137d4b651a2a68cb44c3a7cb3a873d9609c4fa24957e888cb1b6182d1e5","observation_id":"c62d8aeb-11ed-4b83-9c34-b253c8077525","resolution":{"observed_at":"2026-08-01T17:51:45.669286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.672358Z","title":"Cwe - cwe-1395: Dependency on vulnerable third-party component (4.20),","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.672358Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:7ecb8386bd2ce53fc8789d9c847eaf7ad3d1d0514a5a8a67966fd2366bb5812e","observation_id":"5d32bdd3-6ee1-40fb-9aab-f53177984280","resolution":{"observed_at":"2026-08-01T17:51:45.672358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.675106Z","title":"Cwe - cwe-183: Permissive list of allowed inputs (4.20),","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.675106Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:a165d00c7aded44f2e391ebd612f3f7e346acc2a127e3a622c7d0cda8015fbba","observation_id":"a5264b62-abf4-46af-ac4d-d6f1c70ca531","resolution":{"observed_at":"2026-08-01T17:51:45.675106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.678063Z","title":"Cwe - cwe-184: Incomplete list of disallowed inputs (4.20),","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.678063Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:68a7f198117059dc1fcf4206880ba8e418f7f71c66076dfe15a481dd2c003aa3","observation_id":"4e30de34-2a8b-458d-8406-a98b42c395ed","resolution":{"observed_at":"2026-08-01T17:51:45.678063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.680920Z","title":"weights only unpickler.py – pytorch,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.680920Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f7d51208a33c52c0aaf0613465dcfb2d0f889ad061f873d6053e218d6eff52e5","observation_id":"73189794-b6a1-4b39-af6a-5b883ddcb3ed","resolution":{"observed_at":"2026-08-01T17:51:45.680920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.683781Z","title":"Zollllldont download this2 - model card,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.683781Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b5e2adffdbbb077c62c899a2b5f1299dcefda740ea56074b635e630a8ef6b2c6","observation_id":"387c2dc7-e00f-4041-b9e1-d9a6827a0cd2","resolution":{"observed_at":"2026-08-01T17:51:45.683781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.686757Z","title":"“dont download this","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.686757Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b1212f0d0666b10eaa48f8a0bd5219eccc78c2b2ca249f8a6c8dafdbbef67396","observation_id":"2141c251-faec-40af-b5d3-17bb3e0170e3","resolution":{"observed_at":"2026-08-01T17:51:45.686757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.690224Z","title":"picklescan: Security scanner detecting python pickle files performing suspicious actions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.690224Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:7594b207b324ec4baf09c2d82a131f3ad1c7e4855209f26dc3c1d09c761cb965","observation_id":"a0eec29c-3747-497b-8000-e351109dbf53","resolution":{"observed_at":"2026-08-01T17:51:45.690224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.694188Z","title":"Modelscan: Protection against model serialization attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.694188Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:3f4f51b71efdde62eb58c6691aff02c67377cca941dfd1d5a4e8154037405f98","observation_id":"123db4fe-8f4f-4b39-baeb-f473081d3753","resolution":{"observed_at":"2026-08-01T17:51:45.694188Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-07T12:06:05.853915Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-08-01T17:51:45.697781Z","title":"A large-scale exploit instrumentation study of ai/ml supply chain attacks in hugging face models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.697781Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:6415110f65f3a8c14e57360cdf4045f37a6d64f600106e4ce5bcae35ee5a88c9","observation_id":"788e046b-46af-4838-a942-57e1876bf66b","resolution":{"observed_at":"2026-08-01T17:51:45.697781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.701720Z","title":"pickletools - tools for pickle developers - docs.python.org,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.701720Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:e23cb6fd8c3a7e3d961f120f99374aa752e9f486dff68483068e25c8f6869ec3","observation_id":"47a9acd4-b60a-406c-bcb7-b351c3497136","resolution":{"observed_at":"2026-08-01T17:51:45.701720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.705666Z","title":"zlib — compression compatible with gzip - docs.python.org,","venue":null,"work_id":null,"year":1995},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.705666Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8b86c17531449556689bc132c704ab1c7333cf4b6a7b7eedc7c6ce8e41c61e75","observation_id":"4dbbb40c-1025-4385-b5a4-ea4a22f7e2e2","resolution":{"observed_at":"2026-08-01T17:51:45.705666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.709333Z","title":"Fickling: A python pickling decompiler and static analyzer,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.709333Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8b0775f7b92a43be6ce29d96de87166f7f920430a5b7b45bb439f0575e84d0f8","observation_id":"4332b548-40eb-44ff-8647-de5df7595b8a","resolution":{"observed_at":"2026-08-01T17:51:45.709333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.712443Z","title":null,"venue":null,"work_id":null,"year":1991},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.712443Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:1993dea49d567a73d98edbde2a19ebf8fad779c90af35572c29414a6f8b7258f","observation_id":"1fdaa360-8e71-457c-bd8d-5c6df8181065","resolution":{"observed_at":"2026-08-01T17:51:45.712443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.715300Z","title":"CPython: The python programming language,","venue":null,"work_id":null,"year":1991},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.715300Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f9a9c77325f6c050d360e93bbc1fc246a62eb481b17b53219923d4e8037505ca","observation_id":"5d30dfb9-bf8a-40d3-ad43-b25a07df1582","resolution":{"observed_at":"2026-08-01T17:51:45.715300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.718658Z","title":"Dont download this - opencsg - model card,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.718658Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:e7369d892e87acda70a2914d04aa81e7a8a27b6223bfd0a4c0504c3217ce1f5b","observation_id":"24392e3a-795f-4800-a528-383bcfe9b598","resolution":{"observed_at":"2026-08-01T17:51:45.718658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.722015Z","title":"The python package index — pypi.org,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.722015Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:2d5fd8deb6c61d7302fadf59d2d5341a358146c9413271ed0a1dd8bb27d80f3f","observation_id":"7b04ec25-d43d-4182-a703-70a8ca6f19b3","resolution":{"observed_at":"2026-08-01T17:51:45.722015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.725028Z","title":"Moduleguard: Understanding and detecting module conflicts in python ecosystem,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.725028Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:4dad5075c2b80a5f844fa2577b19ae62adee0952291d6316cca7dc9dbd553e8c","observation_id":"3d2d9b78-38e2-4387-84ba-05eb33e4f632","resolution":{"observed_at":"2026-08-01T17:51:45.725028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.728268Z","title":"Reference for ultralytics/utils/patches.py — docs.ultralytics.com,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.728268Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:6fcdb478b12247b8cfd16a0cbfc4a7a3182ae398653f1baf532f773983e9615a","observation_id":"36fd50d1-2f57-4886-96c3-a4a4c52a7213","resolution":{"observed_at":"2026-08-01T17:51:45.728268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.731486Z","title":"Synthyraesm2-8m hugging face - huggingface.co,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.731486Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:d7c001c6db2605c65f6242e1304195c4b6d1e05330d9c7b1ee83df57a7780831","observation_id":"0a5ac124-b40e-42ec-b819-79581dc5d1c1","resolution":{"observed_at":"2026-08-01T17:51:45.731486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.734357Z","title":"Full text search - hugging face — huggingface.co,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.734357Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:de219e401860f55a4554b1aa12d26d65084e71cd04615c47a604cc10b25c8eb5","observation_id":"0eb9cd87-2263-4ac7-80fa-36c9f942f744","resolution":{"observed_at":"2026-08-01T17:51:45.734357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.737003Z","title":"fakespot-ai/roberta-base-ai-text-detection-v1 - hugging face — huggingface.co,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.737003Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:0a6968ac0aa66cd13d8d2045449f1db7ba9b743459b8cd9cf10ff28c3d300a17","observation_id":"6441c0fa-43bc-4cec-9dc2-f28217d68e91","resolution":{"observed_at":"2026-08-01T17:51:45.737003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.739857Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.739857Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:62d46db3290246173c703404d864671106a67c57b011649f8f2174c332917b5d","observation_id":"3984b5dc-aeca-49f8-a56e-b9d4988dfbb6","resolution":{"observed_at":"2026-08-01T17:51:45.739857Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.742607Z","title":"Llama3-agentflan-adapter — modelscope.cn,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.742607Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:ffc3ec05b3856a8ff08bb5cf11633e9fca793cdf7c156ad26b70824a69f4982f","observation_id":"b27be28b-98b5-4450-974a-cf0a2fd698cd","resolution":{"observed_at":"2026-08-01T17:51:45.742607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.746215Z","title":"Github - swisskyrepo/payloadsallthethings: A list of use- ful payloads and bypass for web application security and p entest/ctf — github.com,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.746215Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:bc7b1a11d5353adbb348c44c082a5172293d634124ab10b39a9fc4e8c62695be","observation_id":"5b23d2e4-5290-48c0-8fed-83b4dc42f2b1","resolution":{"observed_at":"2026-08-01T17:51:45.746215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.749135Z","title":"Online - reverse shell generator — revshells.com,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.749135Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:05a0945b8fff811c2f1a1e25597ec9c5b3a6c0f04c800ab4b0cbe2bf2ec8551a","observation_id":"4bc4f04d-82cd-475c-b4eb-8a08531e1670","resolution":{"observed_at":"2026-08-01T17:51:45.749135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.751873Z","title":"Adds dataflow analysis, generalizes constant opcodes, and cleans up injection by esultanik · pull request #28 · trailofbits/fickling — github.com,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.751873Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:4ad72c206ae7338974cb38673ad72d15e7874efb1106671811dbc04c6277d583","observation_id":"f1fd5f67-0975-4b83-a75e-def0da941d53","resolution":{"observed_at":"2026-08-01T17:51:45.751873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.754610Z","title":"Trail of bits — trailofbits.com,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.754610Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:2a2ab00da300fafe8569b82ea1bed27371c46c127ffe5927bccaaeb36005b7ea","observation_id":"2c25d574-4db3-49f5-91cf-9c39bc6edd25","resolution":{"observed_at":"2026-08-01T17:51:45.754610Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.757319Z","title":"Welcome to fastai – fastai,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.757319Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:7a4341b5635a458c55cc0a085352992c4b6c30b490c820a8b231fd9f610317b9","observation_id":"b469c063-44db-4fa2-a607-bfd9a8dc9a2d","resolution":{"observed_at":"2026-08-01T17:51:45.757319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.760083Z","title":"Github - columbia/pickleball: Pickleball protects users from dangerous pickle-based ml models — github.com,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.760083Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:631050e34402b3e216bf0082b143dd03ce2fae5aec55f7e21ea6fcffc66765bb","observation_id":"74f7578b-e045-4918-a997-4ec08d5e01d0","resolution":{"observed_at":"2026-08-01T17:51:45.760083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.763189Z","title":"Github - s2e-lab/hf-model-analyzer - modeltracer,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.763189Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:80ff23ccfb4e0cc4d870c089865e6f408aadb90251dcaa1b122a398ac1c0338f","observation_id":"fa859f60-af0b-406a-8785-21e04845831f","resolution":{"observed_at":"2026-08-01T17:51:45.763189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.766256Z","title":"Raft - pypi,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.766256Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:3288fd4fb2bd476b5e6239aa3128db7490e28bbf1d548f697e3dbc3950bf099f","observation_id":"260adfa9-02e6-4120-9517-4d8a73692fb1","resolution":{"observed_at":"2026-08-01T17:51:45.766256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.769921Z","title":"Dont download this model - modelscope - model card,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.769921Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:90a7447b51350fbf8f8998b71ae01f53cc591745f3693b6a7df63df0e99f1573","observation_id":"cb1f781d-2d49-4381-889d-26c3f7ca19a2","resolution":{"observed_at":"2026-08-01T17:51:45.769921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.773856Z","title":"Shadowpickle-bench/dont download this - github.com,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.773856Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:2ab0d8c0aca0f26efc9ee5c5fc5ceff778bda933a8c0f7f0c89a04f62c4dcdb3","observation_id":"f9c6e17c-7d8d-4e91-bedf-d179f9bfe996","resolution":{"observed_at":"2026-08-01T17:51:45.773856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.777605Z","title":"Github - dashingsoft/pyarmor: A tool used to obfuscate python scripts , bind obfuscated scripts to fixed machine or expire obfus- cated scripts. — github.com,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.777605Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:bea0e91de4dd51a11d8f48600ea9e92b2d628bdc4e6ff51fc6cdd4231bc2d59c","observation_id":"fee03c52-7a55-40db-80f5-c8281c99a6e2","resolution":{"observed_at":"2026-08-01T17:51:45.777605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.781231Z","title":"Github - nyudenkov/pysentry: Scan your python depen- dencies for known security vulnerabilities with rust-powered scanner - github.com,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.781231Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:88824f30adef284e616bd8f5ee91051bfbf32b89d907846fc484f99040707388","observation_id":"b3f79214-8a8d-41ae-aada-c8b7d3d76287","resolution":{"observed_at":"2026-08-01T17:51:45.781231Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.784734Z","title":"Github - splitline/pickora: A toy compiler that can convert python scripts to pickle bytecode,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.784734Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8be9b4c0166c4542e71e668952a42208d19bdc4548c6b21ad8fce665a2eda430","observation_id":"6013a5f3-d46c-4216-855d-fe8cdc428a6b","resolution":{"observed_at":"2026-08-01T17:51:45.784734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.788078Z","title":"Github - security-pride/malhug,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.788078Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:928deed2b0cf6872809dcd6e376d8294262714b9e9e041a7f29e3b05dc7ea41d","observation_id":"df7a2e59-9936-4225-a56b-ea0b06d4fc48","resolution":{"observed_at":"2026-08-01T17:51:45.788078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.792127Z","title":"/bin/bash","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.792127Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:c262ff2c4893a4adcd55ccfbd8b85c986492ad347f7663c8be030bb245fa9659","observation_id":"26a7b358-4799-4eec-aa52-385bb33bfd3e","resolution":{"observed_at":"2026-08-01T17:51:45.792127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.795575Z","title":"The collected payloads are Pickled into self-contained files, such that they can be directly injected into PyTorch models, as they are both binary data with the same set of opcodes","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.795575Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:8fe07cd1dd3bfd470669c7c521a960f12a26bc5a3099071051e48a2475d23ae6","observation_id":"e9daeb42-040c-4fcc-899c-ca99ac5c6657","resolution":{"observed_at":"2026-08-01T17:51:45.795575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.798789Z","title":"We then edit the memory addresses of the injecting Pickle file to be greater than TABLE XVII: Open-source SOTA’s performance on SHADOWPICKLEvs","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.798789Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:4679bd14ba18af29a8a470bc1ed42be14773df293d85551e28455c9b11639591","observation_id":"a690f43c-2654-45c0-96cd-abb0b5fe9c03","resolution":{"observed_at":"2026-08-01T17:51:45.798789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.801965Z","title":"cat /etc/passwd","venue":null,"work_id":null,"year":2039},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.801965Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:9d8e4a19f8afc5947b964f7cde3fbf55f63ee6d53c637dfbe9816b74227b8335","observation_id":"e27e960a-f36e-4cda-874d-be4afda9b60d","resolution":{"observed_at":"2026-08-01T17:51:45.801965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T19:40:38.957161Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks"},"reference_resolution":{"displayed":77,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":77,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":77},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 77 of 77 outbound references and 0 inbound Pith citation observations for arXiv:2607.17503."}