Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-05T15:32:05.075485Z
Paper Citation Record · LEDGER
As of 8 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 3 inbound Pith citation observations for arXiv:2508.19774.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-05T15:32:05.075485Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-08-01T17:51:45.653822Z
A source-named dated measurement, never combined with another source.
Source: arxiv_reference, observed 2026-06-30T20:15:05.280261Z
54 of 54 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 2f588848-0530-4524-984b-79691ff27c3f · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again PyTorch,
Reference 1
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 92927e76-52e6-495d-8396-f063fd64fa8c · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Hugging Face – The AI community building the future,
Reference 2
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 71cf5939-330b-43dd-b4dd-f83a2ba0badb · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again ModelZoo,
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 7d8862ea-d44d-4b70-a575-2d5f447819bf · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again BERT: Pre- training of deep bidirectional transformers for language understanding,
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation dc401e8f-aee9-4eaf-9572-05637e37bf34 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Attention is all you need,
Reference 5
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5bf7b2ae-35c9-4604-b7ac-a24f68629765 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Language models are unsupervised multitask learners
Reference 6
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation bcbefcad-6a0d-4986-aba7-b0f01eb08318 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Deep residual learning for image recognition,
Reference 7
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation fffb4416-7db7-4f0f-ad8f-25dd569438a2 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Densely connected convolutional networks,
Reference 8
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 6fe83873-e6b7-45be-ac96-e080eee96a56 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again An image is worth 16x16 words: Transformers for image recognition at scale,
Reference 9
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c0b0317f-9843-42a8-82b7-e40a1cedeaa1 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again safetensors,
Reference 10
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation ea7c1932-9213-4eea-9792-c3165f136121 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Models are codes: Towards measuring malicious code poisoning attacks on pre-trained model hubs,
Reference 11
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation a25f2a4c-f851-4a96-bf2a-1616a711d4d0 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again picklescan,
Reference 12
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 80a6864f-bbfb-4fad-8172-7f4708cf57f5 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again modelscan,
Reference 13
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation ca2955e5-d03b-4dbb-bbf4-563121eb99db · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Pickle scanning,
Reference 14
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 43aeeac9-be85-4242-8034-79d2d8325b8e · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Third-party scanner: Protect AI,
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 08ba6cb6-f8ea-4f23-b32b-39454a55dd3d · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again pickle — Python object serialization,
Reference 16
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 28c0b6de-8f1a-451a-a38d-b939f8eac87d · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again We R in a Right Pickle With All These Insecure Serialization Formats,
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation b4466fee-1c17-4e56-aede-3a4b69cbb0bc · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Never a dill moment: Exploiting machine learning pickle files,
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 4fc8d286-e16a-4fe6-8b73-4f3b393df224 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Peatmoss: A dataset and initial analysis of pre-trained models in open-source software,
Reference 19
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation bd78720b-bcdd-465a-951f-32d6de164b46 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Data scientists targeted by malicious hugging face ml models with silent backdoor,
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 04e527f6-19c5-42a9-a66a-7f312c8d6dc9 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Models are code: A deep dive into security risks in ten- sorflow and keras,
Reference 21
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 7c26da70-23fa-4a25-8cf4-3e0cc1bbfab9 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Confused Learning: Supply Chain Attacks through Machine Learning Models,
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 548f820f-3870-4eb1-b43b-5b94ac2ab157 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Model File Vulnerability Bug Bounty Program,
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 2f9dbc58-974a-4509-8fd6-68f76a1c0ceb · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Numpy: The fundamental package for scientific computing with python,
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 948b09da-3bca-439f-9199-998ac266a776 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Joblib: Computing with python functions,
Reference 25
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation ec6ee654-0370-4f0d-b8ce-a95605feba21 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Tensorflow: An open source machine learning framework for everyone,
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 3853c030-3e37-4c5b-be4a-a084c0760b97 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Keras: Deep learning for humans,
Reference 27
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 6bdf370f-20f6-4173-b9a8-8b4e736fb7ae · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Nvidia nemo: Build custom generative ai,
Reference 28
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 74871a0e-c046-4455-803d-ec5cbd0cc5aa · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Tensorflow Model Format,
Reference 29
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation dd9f50ae-8378-4353-8144-20d9a79812a2 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Pickora,
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 0981f552-550e-41a6-9bac-e3cc1677ce0d · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again DeepSeek-V3 Technical Report
Reference 31
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 79101cff-438b-40aa-b1bc-3cf7ce48647b · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Chatbot arena: An open platform for evaluating llms by human preference,
Reference 32
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 1d892db2-d33b-4868-878b-9ab59f91e9fe · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again GPT-4o System Card
Reference 33
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a1c8ab7a-c2e3-45f4-b6a0-13c64c66de50 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again restrict joblib loading to only certain classes,
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation d6c77dfc-257e-4cd4-8392-dfde74a24973 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Update torch load for load from disk,
Reference 35
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 1672c9d4-da20-4153-80ef-55366b9abc5d · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again fickling: A python pickling decompiler and static analyzer,
Reference 36
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 226c8b96-09ad-422b-b4d7-8f7d77e0e100 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Pickleball: Secure deserialization of pickle-based machine learning models,
Reference 37
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8fc2bb05-5a98-47d8-8a3f-76f20bcb9ee6 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs,
Reference 38
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 9e1ebfc8-8d0c-4c18-883c-ce8129c477cb · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again How to Make Hugging Face to Hug Worms: Discovering and Exploiting Unsafe Pickle.loads over Pre-Trained Large Model Hubs,
Reference 39
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 307a95c0-19f1-43c2-9231-f7d42fd937ce · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact
Reference 40
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 93c15d67-a8da-47a3-9132-6ebe16ae7342 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again An empirical study of artifacts and security risks in the pre-trained model supply chain,
Reference 41
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 011880e4-64b7-424b-8fb6-0462ca11267d · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Pain pickle: Bypassing python restricted unpickler for automatic exploit generation,
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 0829b348-0e3d-44cf-ae89-5bc629029f39 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Deep learning model reuse in the huggingface community: Challenges, benefit and trends,
Reference 43
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation ae1c0d9b-888b-4361-8b00-b9d470667ad2 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Stegonet: Turn deep neural network into a stegomalware,
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 3fa500a8-e688-44d7-bf38-0439bec0032c · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Evilmodel: Hiding malware inside of neural network models,
Reference 45
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation f5fdaf2c-6c9f-4097-88e8-83f26c752a9a · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Evilmodel 2.0: Bringing neural network models into malware attacks,
Reference 46
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 2c0bd3bf-8ef3-4fca-a71c-a77ba23adccf · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem
Reference 47
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation a7a48b4a-c281-49ae-a8e4-a502d34a784b · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack
Reference 48
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation e8b56047-f6fe-4414-b826-6267c9e6a83f · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Steganalysis of ai models lsb attacks,
Reference 49
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 272ee81a-8120-4854-b37a-25bf4ccf31e3 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning
Reference 50
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 83ab4e70-dc6b-444b-9052-8b7d62bec639 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again os").system(
Reference 51
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 1b9489f3-d45e-460d-b227-cfba0fe4e892 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again As demonstrated in Figure 5, the function resolve_dott ed_attribute takes three parameters: obj, attr , and allow_dotted_names, among which obj and attr are particularly critical
Reference 52
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 47e02a29-40e0-4d81-99df-b628df83c87f · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Unresolved cited work
Reference 53
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 1d71b0b2-aebc-4a25-9d46-a55cbdb5c0d0 · outbound
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again ": 6 # List opcodes 7 try: 8 ops: List[Tuple[Any, Any, Union[ int, None]]] = list( 9 pickletools.genops(data) 10 ) 11 ... 12 for n in range (len(ops)): 13 ... 14 elif op_name ==
Reference 54
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation ee7971f1-41c9-4763-ae2b-a03952f5f69b · inbound
MEASER: Malware embedding attacks on open-source LLMs The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 53017416-a208-430c-a122-82ccf21b54ec · inbound
PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation aa0daeb5-56d7-41bd-a796-603606263552 · inbound
ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again
Reference 31
Source-reported events for the cited work
Unavailable: canonical work link unavailable.