ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks | Paper Citation Record

Observation 35704110-02a4-490e-8a77-9f0b6f86a560 · outbound

This paper cites Hugging face – the ai community building the future.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Hugging face – the ai community building the future

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.556488Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1c0647a8-2662-4b70-8566-318c6be61e8f · outbound

This paper cites an unresolved cited work.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.562913Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1b43a903-09a4-4a74-aa94-6ebe76b1aabc · outbound

This paper cites Opencsg,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Opencsg,

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.566381Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 017c25f6-2a97-4a15-a96f-1f1c02029f67 · outbound

This paper cites Modelscope,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Modelscope,

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.570126Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 62f5d65a-0455-4aca-a766-2f609f20280f · outbound

This paper cites nvidia/nemotron-cascade-2-30b-a3b - hugging face,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks nvidia/nemotron-cascade-2-30b-a3b - hugging face,

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.573101Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4223c188-4e34-4ad0-9152-6444406b1e12 · outbound

This paper cites google/gemma-4-31b-it - hugging face,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks google/gemma-4-31b-it - hugging face,

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.576408Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 22efd49b-0d6e-4073-93b4-681fb061d101 · outbound

This paper cites microsoft/harrier-oss-v1-0.6b - hugging face,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks microsoft/harrier-oss-v1-0.6b - hugging face,

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.579743Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 747f71a9-522a-468a-a9b4-ea267f769e85 · outbound

This paper cites openai/gpt-oss-120b - hugging face,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks openai/gpt-oss-120b - hugging face,

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.582579Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 56e11e20-98bc-4414-8737-f2fbc4e34308 · outbound

This paper cites [Online].

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks [Online]

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.585259Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8b6fa409-d1c0-43a9-83bd-5592b03d0745 · outbound

This paper cites Data scientists targeted by malicious hugging face ml models with silent backdoor,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Data scientists targeted by malicious hugging face ml models with silent backdoor,

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.588118Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5c8cc722-3874-4a1b-8122-bb964bedc8d5 · outbound

This paper cites Models are codes: Towards measuring malicious code poisoning attacks on pre-trained model hubs,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Models are codes: Towards measuring malicious code poisoning attacks on pre-trained model hubs,

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.590992Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 319abae0-f1a3-4820-aee5-9930b2e825ea · outbound

This paper cites Third-party scanner: Jfrog,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Third-party scanner: Jfrog,

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.593984Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6c4f80cb-4ea4-4aa6-b44b-e6890312526e · outbound

This paper cites third-party scanner: protect ai,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks third-party scanner: protect ai,

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.596831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e7becbb0-4d01-43bb-a65e-fdf28873428f · outbound

This paper cites pickle scanning (hub documentation),.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks pickle scanning (hub documentation),

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.599762Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6f42939d-e4ec-4b0b-81cc-e638829d2195 · outbound

This paper cites Hugging face and virustotal collaborate to strengthen ai security,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Hugging face and virustotal collaborate to strengthen ai security,

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.603036Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8f5e7171-cec4-47cc-a9cf-c6d0a71a9b01 · outbound

This paper cites Gentel - home,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Gentel - home,

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.606194Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1bab09cc-e0fe-4892-ac54-2a2f46b5a60d · outbound

This paper cites Opencsg - gentel example,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Opencsg - gentel example,

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.609086Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4702497d-999b-42a1-993a-b9c7f636a464 · outbound

This paper cites Malicious ml models discovered on hugging face platform - reversinglabs,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Malicious ml models discovered on hugging face platform - reversinglabs,

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.612129Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 63f68c1d-733f-47e4-a6ce-571ad899fda2 · outbound

This paper cites 4m models scanned: Protect ai + hugging face 6 months in,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks 4m models scanned: Protect ai + hugging face 6 months in,

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.615475Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0839cc4f-7c5e-4685-a27a-29b38abc3be4 · outbound

This paper cites New hugging face vulnerability exposes ai models to supply chain attacks,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks New hugging face vulnerability exposes ai models to supply chain attacks,

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.618725Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b956acbf-faac-41f9-8898-7c6ffbf3a753 · outbound

This paper cites Over 100 malicious ai/ml models found on hugging face platform,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Over 100 malicious ai/ml models found on hugging face platform,

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.621808Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2fed1bb0-caa6-40fd-a107-b46fe5d68d02 · outbound

This paper cites Malicious ml models on hugging face leverage broken pickle format to evade detection,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Malicious ml models on hugging face leverage broken pickle format to evade detection,

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.625425Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b449cfb2-2b28-42ce-b244-cfa52a17e419 · outbound

This paper cites Montalbano, https://www.darkreading.com/application-security/hugg ing-face-ai-platform-100-malicious-code-execution-models, Feb 2024.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Montalbano, https://www.darkreading.com/application-security/hugg ing-face-ai-platform-100-malicious-code-execution-models, Feb 2024

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.629111Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 35ee187d-367c-441d-83ba-1e685cb1947f · outbound

This paper cites Malicious AI Models on Hugging Face Exploit Novel A ttack Technique,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Malicious AI Models on Hugging Face Exploit Novel A ttack Technique,

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.632539Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f3dc4bf0-c1bc-45f2-85c7-c640cfbfa57f · outbound

This paper cites Federal Register :: Request Access,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Federal Register :: Request Access,

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.635735Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6a67299c-50e7-4d1d-92de-cebe6156b954 · outbound

This paper cites cve.org,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks cve.org,

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.638812Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 28c8b31d-0526-4b30-91fa-103d499fd6cd · outbound

This paper cites Pickleball: Secure deserialization of pickle-based machine learning models (extended report),.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Pickleball: Secure deserialization of pickle-based machine learning models (extended report),

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.641819Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 70ac1f57-73a5-4e00-8eac-3d37e71aa330 · outbound

This paper cites How to make hugging face to hug worms: Discovering and exploiting unsafe pickle.loads over pre-trained large model hubs - blackhat asia 2024,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks How to make hugging face to hug worms: Discovering and exploiting unsafe pickle.loads over pre-trained large model hubs - blackhat asia 2024,

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.644897Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 844b3273-6508-4e71-a5d3-a7c69ad07e81 · outbound

This paper cites coldwaterq/sectest - model card,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks coldwaterq/sectest - model card,

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.648185Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f99c6456-ae88-4521-b942-ca6b4018cdb8 · outbound

This paper cites zpbrent/reuse - model card,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks zpbrent/reuse - model card,

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.650957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aa0daeb5-56d7-41bd-a796-603606263552 · outbound

This paper cites The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.653822Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fd23ad54-185a-42de-bb37-c60e4f21fc18 · outbound

This paper cites Backdooring pickles: A decade only made things worse - defcon 30,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Backdooring pickles: A decade only made things worse - defcon 30,

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.657190Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a09626da-0e74-47cc-8bf5-2f4612cecf5e · outbound

This paper cites Sour pickles - blackhat us 2011,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Sour pickles - blackhat us 2011,

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.660445Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 22965169-f133-46b6-9339-3e35f41320ea · outbound

This paper cites Cwe - cwe-502: Deserialization of untrusted data (4.20),.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Cwe - cwe-502: Deserialization of untrusted data (4.20),

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.663518Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8f041be5-e4b1-45c7-8174-9e24883bc11c · outbound

This paper cites flawed.net.nz — flawed.net.nz,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks flawed.net.nz — flawed.net.nz,

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.666137Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c62d8aeb-11ed-4b83-9c34-b253c8077525 · outbound

This paper cites Secure pypi? the problem with trusting open source reposi- tories — activestate.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Secure pypi? the problem with trusting open source reposi- tories — activestate.com,

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.669286Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5d32bdd3-6ee1-40fb-9aab-f53177984280 · outbound

This paper cites Cwe - cwe-1395: Dependency on vulnerable third-party component (4.20),.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Cwe - cwe-1395: Dependency on vulnerable third-party component (4.20),

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.672358Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a5264b62-abf4-46af-ac4d-d6f1c70ca531 · outbound

This paper cites Cwe - cwe-183: Permissive list of allowed inputs (4.20),.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Cwe - cwe-183: Permissive list of allowed inputs (4.20),

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.675106Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4e30de34-2a8b-458d-8406-a98b42c395ed · outbound

This paper cites Cwe - cwe-184: Incomplete list of disallowed inputs (4.20),.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Cwe - cwe-184: Incomplete list of disallowed inputs (4.20),

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.678063Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 73189794-b6a1-4b39-af6a-5b883ddcb3ed · outbound

This paper cites weights only unpickler.py – pytorch,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks weights only unpickler.py – pytorch,

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.680920Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 387c2dc7-e00f-4041-b9e1-d9a6827a0cd2 · outbound

This paper cites Zollllldont download this2 - model card,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Zollllldont download this2 - model card,

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.683781Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2141c251-faec-40af-b5d3-17bb3e0170e3 · outbound

This paper cites “dont download this.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks “dont download this

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.686757Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a0eec29c-3747-497b-8000-e351109dbf53 · outbound

This paper cites picklescan: Security scanner detecting python pickle files performing suspicious actions,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks picklescan: Security scanner detecting python pickle files performing suspicious actions,

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.690224Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 123db4fe-8f4f-4b39-baeb-f473081d3753 · outbound

This paper cites Modelscan: Protection against model serialization attacks,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Modelscan: Protection against model serialization attacks,

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.694188Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 788e046b-46af-4838-a942-57e1876bf66b · outbound

This paper cites A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.697781Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 47a9acd4-b60a-406c-bcb7-b351c3497136 · outbound

This paper cites pickletools - tools for pickle developers - docs.python.org,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks pickletools - tools for pickle developers - docs.python.org,

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.701720Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4dbbb40c-1025-4385-b5a4-ea4a22f7e2e2 · outbound

This paper cites zlib — compression compatible with gzip - docs.python.org,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks zlib — compression compatible with gzip - docs.python.org,

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.705666Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4332b548-40eb-44ff-8647-de5df7595b8a · outbound

This paper cites Fickling: A python pickling decompiler and static analyzer,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Fickling: A python pickling decompiler and static analyzer,

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.709333Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1fdaa360-8e71-457c-bd8d-5c6df8181065 · outbound

This paper cites an unresolved cited work.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Unresolved cited work

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.712443Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5d30dfb9-bf8a-40d3-ad43-b25a07df1582 · outbound

This paper cites CPython: The python programming language,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks CPython: The python programming language,

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.715300Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 24392e3a-795f-4800-a528-383bcfe9b598 · outbound

This paper cites Dont download this - opencsg - model card,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Dont download this - opencsg - model card,

Reference 51

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.718658Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7b04ec25-d43d-4182-a703-70a8ca6f19b3 · outbound

This paper cites The python package index — pypi.org,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks The python package index — pypi.org,

Reference 52

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.722015Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3d2d9b78-38e2-4387-84ba-05eb33e4f632 · outbound

This paper cites Moduleguard: Understanding and detecting module conflicts in python ecosystem,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Moduleguard: Understanding and detecting module conflicts in python ecosystem,

Reference 53

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.725028Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 36fd50d1-2f57-4886-96c3-a4a4c52a7213 · outbound

This paper cites Reference for ultralytics/utils/patches.py — docs.ultralytics.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Reference for ultralytics/utils/patches.py — docs.ultralytics.com,

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.728268Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0a5ac124-b40e-42ec-b819-79581dc5d1c1 · outbound

This paper cites Synthyraesm2-8m hugging face - huggingface.co,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Synthyraesm2-8m hugging face - huggingface.co,

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.731486Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0eb9cd87-2263-4ac7-80fa-36c9f942f744 · outbound

This paper cites Full text search - hugging face — huggingface.co,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Full text search - hugging face — huggingface.co,

Reference 56

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.734357Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6441c0fa-43bc-4cec-9dc2-f28217d68e91 · outbound

This paper cites fakespot-ai/roberta-base-ai-text-detection-v1 - hugging face — huggingface.co,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks fakespot-ai/roberta-base-ai-text-detection-v1 - hugging face — huggingface.co,

Reference 57

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.737003Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3984b5dc-aeca-49f8-a56e-b9d4988dfbb6 · outbound

This paper cites an unresolved cited work.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Unresolved cited work

Reference 58

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.739857Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b27be28b-98b5-4450-974a-cf0a2fd698cd · outbound

This paper cites Llama3-agentflan-adapter — modelscope.cn,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Llama3-agentflan-adapter — modelscope.cn,

Reference 59

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.742607Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5b23d2e4-5290-48c0-8fed-83b4dc42f2b1 · outbound

This paper cites Github - swisskyrepo/payloadsallthethings: A list of use- ful payloads and bypass for web application security and p entest/ctf — github.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Github - swisskyrepo/payloadsallthethings: A list of use- ful payloads and bypass for web application security and p entest/ctf — github.com,

Reference 60

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.746215Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4bc4f04d-82cd-475c-b4eb-8a08531e1670 · outbound

This paper cites Online - reverse shell generator — revshells.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Online - reverse shell generator — revshells.com,

Reference 61

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.749135Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f1fd5f67-0975-4b83-a75e-def0da941d53 · outbound

This paper cites Adds dataflow analysis, generalizes constant opcodes, and cleans up injection by esultanik · pull request #28 · trailofbits/fickling — github.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Adds dataflow analysis, generalizes constant opcodes, and cleans up injection by esultanik · pull request #28 · trailofbits/fickling — github.com,

Reference 62

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.751873Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2c25d574-4db3-49f5-91cf-9c39bc6edd25 · outbound

This paper cites Trail of bits — trailofbits.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Trail of bits — trailofbits.com,

Reference 63

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.754610Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b469c063-44db-4fa2-a607-bfd9a8dc9a2d · outbound

This paper cites Welcome to fastai – fastai,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Welcome to fastai – fastai,

Reference 64

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.757319Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 74f7578b-e045-4918-a997-4ec08d5e01d0 · outbound

This paper cites Github - columbia/pickleball: Pickleball protects users from dangerous pickle-based ml models — github.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Github - columbia/pickleball: Pickleball protects users from dangerous pickle-based ml models — github.com,

Reference 65

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.760083Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fa859f60-af0b-406a-8785-21e04845831f · outbound

This paper cites Github - s2e-lab/hf-model-analyzer - modeltracer,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Github - s2e-lab/hf-model-analyzer - modeltracer,

Reference 66

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.763189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 260adfa9-02e6-4120-9517-4d8a73692fb1 · outbound

This paper cites Raft - pypi,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Raft - pypi,

Reference 67

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.766256Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cb1f781d-2d49-4381-889d-26c3f7ca19a2 · outbound

This paper cites Dont download this model - modelscope - model card,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Dont download this model - modelscope - model card,

Reference 68

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.769921Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f9c6e17c-7d8d-4e91-bedf-d179f9bfe996 · outbound

This paper cites Shadowpickle-bench/dont download this - github.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Shadowpickle-bench/dont download this - github.com,

Reference 69

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.773856Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fee03c52-7a55-40db-80f5-c8281c99a6e2 · outbound

This paper cites Github - dashingsoft/pyarmor: A tool used to obfuscate python scripts , bind obfuscated scripts to fixed machine or expire obfus- cated scripts. — github.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Github - dashingsoft/pyarmor: A tool used to obfuscate python scripts , bind obfuscated scripts to fixed machine or expire obfus- cated scripts. — github.com,

Reference 70

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.777605Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b3f79214-8a8d-41ae-aada-c8b7d3d76287 · outbound

This paper cites Github - nyudenkov/pysentry: Scan your python depen- dencies for known security vulnerabilities with rust-powered scanner - github.com,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Github - nyudenkov/pysentry: Scan your python depen- dencies for known security vulnerabilities with rust-powered scanner - github.com,

Reference 71

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.781231Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6013a5f3-d46c-4216-855d-fe8cdc428a6b · outbound

This paper cites Github - splitline/pickora: A toy compiler that can convert python scripts to pickle bytecode,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Github - splitline/pickora: A toy compiler that can convert python scripts to pickle bytecode,

Reference 72

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.784734Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation df7a2e59-9936-4225-a56b-ea0b06d4fc48 · outbound

This paper cites Github - security-pride/malhug,.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks Github - security-pride/malhug,

Reference 73

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.788078Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 26a7b358-4799-4eec-aa52-385bb33bfd3e · outbound

This paper cites /bin/bash.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks /bin/bash

Reference 74

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.792127Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e9daeb42-040c-4fcc-899c-ca99ac5c6657 · outbound

This paper cites The collected payloads are Pickled into self-contained files, such that they can be directly injected into PyTorch models, as they are both binary data with the same set of opcodes.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks The collected payloads are Pickled into self-contained files, such that they can be directly injected into PyTorch models, as they are both binary data with the same set of opcodes

Reference 75

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.795575Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a690f43c-2654-45c0-96cd-abb0b5fe9c03 · outbound

This paper cites We then edit the memory addresses of the injecting Pickle file to be greater than TABLE XVII: Open-source SOTA’s performance on SHADOWPICKLEvs.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks We then edit the memory addresses of the injecting Pickle file to be greater than TABLE XVII: Open-source SOTA’s performance on SHADOWPICKLEvs

Reference 76

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.798789Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e27e960a-f36e-4cda-874d-be4afda9b60d · outbound

This paper cites cat /etc/passwd.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks cat /etc/passwd

Reference 77

Resolution: unresolved; no resolver link, observed 2026-08-01T17:51:45.801965Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers