Pith. sign in

Paper Citation Record · LEDGER

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages

As of 21 August 2026, this Paper Citation Record lists 17 of 17 outbound references and 2 inbound Pith citation observations for arXiv:2505.21263.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2505.21263 v1

Coverage vector

measured 17 of 17 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T13:40:17.300665Z

measured 19 of 19 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-21T06:32:19.484+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T11:02:38.177710Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-07T11:02:38.212249Z

Reference resolution

17 of 17 outbound references displayed

  • verified exact0
  • verified fuzzy11
  • unresolved6
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation b1c5ef8b-1ec7-40e1-a7b3-1d4e5ea239cf · outbound

This paper cites an unresolved cited work.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Unresolved cited work

Reference 1

Resolution
unresolved
raw_fallback, observed 2026-08-07T13:40:21.247810Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:15.863882Z digest=sha256:862e0326995f1b6512f41cf76901b58a63ee355e7b58f1471e948cc3f63f6e56

Observation ac625161-6f0a-469d-af4c-3b263f554958 · outbound

This paper cites an unresolved cited work.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Unresolved cited work

Reference 2

Resolution
unresolved
raw_fallback, observed 2026-08-07T13:40:21.060102Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:15.942054Z digest=sha256:933bb62e9c42056cc9eb5f52b12d7288eb2742d3c763c462d4d9e633eb7df7ce

Observation 726337cb-f0b9-4a28-95d5-c908549ee0c5 · outbound

This paper cites an unresolved cited work.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Unresolved cited work

Reference 3

Resolution
unresolved
raw_fallback, observed 2026-08-07T13:40:20.808518Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:15.987789Z digest=sha256:f0a955db39feec7437f40d4e2de050a383fc3cffa9d3f991d66d4bbda66bb502

Observation e973c77b-4c3e-4f98-b2e5-381eacfdae9a · outbound

This paper cites an unresolved cited work.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Unresolved cited work

Reference 4

Resolution
unresolved
raw_fallback, observed 2026-08-07T13:40:20.559158Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:16.055649Z digest=sha256:b997fcb7d0f9d5ac1dd67fadb4a4235c3a2af9b0bd091162b8d7bc6e19fa2d99

Observation 66759724-c81e-4b20-9a8b-2eb50b5afe3c · outbound

This paper cites Cyberhaven Supply Chain Attack Exploiting Browser Ex- tensions.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Cyberhaven Supply Chain Attack Exploiting Browser Ex- tensions

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:20.367558Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:16.182224Z digest=sha256:22f5872dad0d0eea284917291351fd77c99b341f28bca73d06f9d99364ce3f0d

Observation 8b66d8cc-9122-414c-bae0-f6406b4e0328 · outbound

This paper cites an unresolved cited work.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Unresolved cited work

Reference 6

Resolution
unresolved
raw_fallback, observed 2026-08-07T13:40:20.173917Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:16.274688Z digest=sha256:ea41003c740d5262f2dc44b78ab78a2f8c9eacbacbbaafc610205d1220abaca9

Observation a8a1a03b-7bdd-4dc1-85be-a4993172b93f · outbound

This paper cites an unresolved cited work.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Unresolved cited work

Reference 7

Resolution
unresolved
raw_fallback, observed 2026-08-07T13:40:20.008187Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:16.419658Z digest=sha256:5028a643ee82e4e2304cb9ef0cb438b0a742bb38e99890489e571c7b36cef347

Observation 1d30bb93-a13f-4ff4-93aa-6ff2222fa50d · outbound

This paper cites Malicious VSCode Extensions Infecting Users with Cryp- tominer.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Malicious VSCode Extensions Infecting Users with Cryp- tominer

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:19.809973Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:16.588013Z digest=sha256:11f9af58abf78b02f71c64ee261f9201c350bca1f305100e1905b203082cab25

Observation 9a2b15cd-6851-4e37-872c-b79960e2c8a5 · outbound

This paper cites Extension Runtime Security.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Extension Runtime Security

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:19.661770Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:16.681124Z digest=sha256:70e75b63d2c9baecee40a749e1b767808122f2aa9e5779a411032badab33d7c8

Observation 4d5a23fc-632c-4243-9aab-c5443a8e19af · outbound

This paper cites Malicious Helpers: VSCode Extensions Observed Stealing Sensitive Information.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Malicious Helpers: VSCode Extensions Observed Stealing Sensitive Information

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:19.400504Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:16.788985Z digest=sha256:fba1fca0bad5ebb04cf029741dca2633228d5e745557601fe03032643e5905c0

Observation d4a7716a-b7e7-4333-a86b-692ef1c49912 · outbound

This paper cites Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:19.130279Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:16.871234Z digest=sha256:72eb53025fa35073184bb98aa11e6140f6cb03f3c2d70bb72f6dceaf799d8189

Observation 1743b88c-ace1-4789-9bfd-19cd43d1338c · outbound

This paper cites SES stands for fear- less cooperation.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages SES stands for fear- less cooperation

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:18.905970Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:16.962450Z digest=sha256:b9e0635928308f6c1a54b26778c43f42abf8e61ffafb7010bc36148a0e7e1404

Observation 63d6fa2b-b61e-49db-a0a3-b849f055ec2e · outbound

This paper cites Web-LLM: Run large language models in your browser.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Web-LLM: Run large language models in your browser

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:18.564034Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:17.013015Z digest=sha256:bcde4e3344b02c139a541ffcbbb56762e17f4d09c70d90b33f9e53d5f0558e1a

Observation e6d0ae9a-3ced-4d9e-b1c6-08c72e2004c9 · outbound

This paper cites RetireJS - Scanner detecting the use of JavaScript libraries with known vul- nerabilities.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages RetireJS - Scanner detecting the use of JavaScript libraries with known vul- nerabilities

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:17.997550Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:17.126386Z digest=sha256:0ac164cc83520900c24eb549228ca5e6db59fe1dbaffd55bc565952944bf33ea

Observation 4f5bda61-59f0-4f46-8d6c-f4c856facb7b · outbound

This paper cites Content Security Policy (CSP).

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Content Security Policy (CSP)

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:17.735570Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:17.229172Z digest=sha256:d13a8bc6b97fa2a3a51c360dacb263d1bc602cdd72403c208508c4d7e404024a

Observation fbfdab88-8896-47d0-b4a2-2c73d31bad09 · outbound

This paper cites ¡iframe¿: The Inline Frame element.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages ¡iframe¿: The Inline Frame element

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:17.477375Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:17.300665Z digest=sha256:4abc6c28c10212a17f0639b0a9a99d2b15c8ae7539b4984b3b0377cad9714b67

Observation 0ee6b957-b13d-463a-9959-6a1d1968c545 · outbound

This paper cites Available: https://github.com/mlc-ai/web-llm.

JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages Available: https://github.com/mlc-ai/web-llm

Reference 2023

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T13:40:18.296823Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T13:40:17.057755Z digest=sha256:74c31ce16865b13d43eca2589cd5e109139d0e0cb1e93724fced2ad1eeacea65

Pith citing papers

Observation df4ffd20-2348-406f-9444-c6222436e5df · inbound

Client-Side Zero-Shot LLM Inference for Comprehensive In-Browser URL Analysis cites this paper.

Client-Side Zero-Shot LLM Inference for Comprehensive In-Browser URL Analysis JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages

Reference 11

Resolution
verified exact
local_arxiv, observed 2026-08-07T11:02:38.218199Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-08-07T11:02:38.177710Z digest=sha256:958402515a67d0025303c20dac2b0f212c884836c326fcb27bdf5514e02a43ee

Observation 0e851433-4093-42f3-87f1-77458a274f02 · inbound

An Evaluation of Large Language Models for Detection of Malicious Python Packages cites this paper.

An Evaluation of Large Language Models for Detection of Malicious Python Packages JavaSith: A Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages

Reference 29

Resolution
unresolved
no resolver link, observed 2026-08-02T22:38:51.580104Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T22:38:51.580104Z digest=sha256:dc6926de7f0a279ea0907e20ec89fe51c3060bde5077d54cd422508423e58b32