{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:FEWLH4GA5XGR2BECZGNI6XTKLI","short_pith_number":"pith:FEWLH4GA","canonical_record":{"source":{"id":"2408.02509","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-05T14:31:26Z","cross_cats_sorted":["cs.LG","cs.PL","cs.SE"],"title_canon_sha256":"40b6d7b2c95af78e03c636145efe0413b19777bc5c2c7f620ecc7720321a1b43","abstract_canon_sha256":"b859134f2566113eab498f10b45966276174432c7108db65188f099e4cbec67c"},"schema_version":"1.0"},"canonical_sha256":"292cb3f0c0edcd1d0482c99a8f5e6a5a3dd24ef9a1f12f6d0064ad5f082337ed","source":{"kind":"arxiv","id":"2408.02509","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.02509","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"arxiv_version","alias_value":"2408.02509v2","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.02509","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"pith_short_12","alias_value":"FEWLH4GA5XGR","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"pith_short_16","alias_value":"FEWLH4GA5XGR2BEC","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"pith_short_8","alias_value":"FEWLH4GA","created_at":"2026-07-05T11:20:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:FEWLH4GA5XGR2BECZGNI6XTKLI","target":"record","payload":{"canonical_record":{"source":{"id":"2408.02509","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-05T14:31:26Z","cross_cats_sorted":["cs.LG","cs.PL","cs.SE"],"title_canon_sha256":"40b6d7b2c95af78e03c636145efe0413b19777bc5c2c7f620ecc7720321a1b43","abstract_canon_sha256":"b859134f2566113eab498f10b45966276174432c7108db65188f099e4cbec67c"},"schema_version":"1.0"},"canonical_sha256":"292cb3f0c0edcd1d0482c99a8f5e6a5a3dd24ef9a1f12f6d0064ad5f082337ed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:20:45.681334Z","signature_b64":"lqKec/fG9idF/OI9pUS0cb0X72CgLABa2UFBNPc7MwAT9WuVpiYd0sK0y0NtAnjgSAhAyHgjbRdQG3R53QhTAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"292cb3f0c0edcd1d0482c99a8f5e6a5a3dd24ef9a1f12f6d0064ad5f082337ed","last_reissued_at":"2026-07-05T11:20:45.680795Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:20:45.680795Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.02509","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:20:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"COfN24Zek5hWcWNBwJ8zEai/IJ4os6elviT/2QLUgf9sVn2ZMak2Gki+aB7kSN6tzmt7m0GYe8q9VaP8DE/wAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T14:23:27.989271Z"},"content_sha256":"c1c4fc6e595f775e3fd3a8c39517a441c04e5f4ecee1e7fb1e94d21d0b1a9999","schema_version":"1.0","event_id":"sha256:c1c4fc6e595f775e3fd3a8c39517a441c04e5f4ecee1e7fb1e94d21d0b1a9999"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:FEWLH4GA5XGR2BECZGNI6XTKLI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Black-Box Adversarial Attacks on LLM-Based Code Completion","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG","cs.PL","cs.SE"],"primary_cat":"cs.CR","authors_text":"Jingxuan He, Mark Vero, Martin Vechev, Niels M\\\"undler, Slobodan Jenko","submitted_at":"2024-08-05T14:31:26Z","abstract_excerpt":"Modern code completion engines, powered by large language models (LLMs), assist millions of developers with their strong capabilities to generate functionally correct code. Due to this popularity, it is crucial to investigate the security implications of relying on LLM-based code completion. In this work, we demonstrate that state-of-the-art black-box LLM-based code completion engines can be stealthily biased by adversaries to significantly increase their rate of insecure code generation. We present the first attack, named INSEC, that achieves this goal. INSEC works by injecting an attack stri"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.02509","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.02509/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:20:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a6m6Iko+ycIesKXez4Vc9eAmKtPIPDefGbYCqJqG0ISudp6AA1SEUy7KPLGnf35ahX3u982Q5cGrAw8/uJc/DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T14:23:27.990210Z"},"content_sha256":"4a614bce9b3bc62dc7f0d9062141c3828b3acff00e58cc54d0bd836d45ae0e14","schema_version":"1.0","event_id":"sha256:4a614bce9b3bc62dc7f0d9062141c3828b3acff00e58cc54d0bd836d45ae0e14"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FEWLH4GA5XGR2BECZGNI6XTKLI/bundle.json","state_url":"https://pith.science/pith/FEWLH4GA5XGR2BECZGNI6XTKLI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FEWLH4GA5XGR2BECZGNI6XTKLI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T14:23:27Z","links":{"resolver":"https://pith.science/pith/FEWLH4GA5XGR2BECZGNI6XTKLI","bundle":"https://pith.science/pith/FEWLH4GA5XGR2BECZGNI6XTKLI/bundle.json","state":"https://pith.science/pith/FEWLH4GA5XGR2BECZGNI6XTKLI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FEWLH4GA5XGR2BECZGNI6XTKLI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:FEWLH4GA5XGR2BECZGNI6XTKLI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b859134f2566113eab498f10b45966276174432c7108db65188f099e4cbec67c","cross_cats_sorted":["cs.LG","cs.PL","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-05T14:31:26Z","title_canon_sha256":"40b6d7b2c95af78e03c636145efe0413b19777bc5c2c7f620ecc7720321a1b43"},"schema_version":"1.0","source":{"id":"2408.02509","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.02509","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"arxiv_version","alias_value":"2408.02509v2","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.02509","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"pith_short_12","alias_value":"FEWLH4GA5XGR","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"pith_short_16","alias_value":"FEWLH4GA5XGR2BEC","created_at":"2026-07-05T11:20:45Z"},{"alias_kind":"pith_short_8","alias_value":"FEWLH4GA","created_at":"2026-07-05T11:20:45Z"}],"graph_snapshots":[{"event_id":"sha256:4a614bce9b3bc62dc7f0d9062141c3828b3acff00e58cc54d0bd836d45ae0e14","target":"graph","created_at":"2026-07-05T11:20:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.02509/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern code completion engines, powered by large language models (LLMs), assist millions of developers with their strong capabilities to generate functionally correct code. Due to this popularity, it is crucial to investigate the security implications of relying on LLM-based code completion. In this work, we demonstrate that state-of-the-art black-box LLM-based code completion engines can be stealthily biased by adversaries to significantly increase their rate of insecure code generation. We present the first attack, named INSEC, that achieves this goal. INSEC works by injecting an attack stri","authors_text":"Jingxuan He, Mark Vero, Martin Vechev, Niels M\\\"undler, Slobodan Jenko","cross_cats":["cs.LG","cs.PL","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-05T14:31:26Z","title":"Black-Box Adversarial Attacks on LLM-Based Code Completion"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.02509","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c1c4fc6e595f775e3fd3a8c39517a441c04e5f4ecee1e7fb1e94d21d0b1a9999","target":"record","created_at":"2026-07-05T11:20:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b859134f2566113eab498f10b45966276174432c7108db65188f099e4cbec67c","cross_cats_sorted":["cs.LG","cs.PL","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-05T14:31:26Z","title_canon_sha256":"40b6d7b2c95af78e03c636145efe0413b19777bc5c2c7f620ecc7720321a1b43"},"schema_version":"1.0","source":{"id":"2408.02509","kind":"arxiv","version":2}},"canonical_sha256":"292cb3f0c0edcd1d0482c99a8f5e6a5a3dd24ef9a1f12f6d0064ad5f082337ed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"292cb3f0c0edcd1d0482c99a8f5e6a5a3dd24ef9a1f12f6d0064ad5f082337ed","first_computed_at":"2026-07-05T11:20:45.680795Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:20:45.680795Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lqKec/fG9idF/OI9pUS0cb0X72CgLABa2UFBNPc7MwAT9WuVpiYd0sK0y0NtAnjgSAhAyHgjbRdQG3R53QhTAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:20:45.681334Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.02509","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c1c4fc6e595f775e3fd3a8c39517a441c04e5f4ecee1e7fb1e94d21d0b1a9999","sha256:4a614bce9b3bc62dc7f0d9062141c3828b3acff00e58cc54d0bd836d45ae0e14"],"state_sha256":"fd7d35fd5166a2ca4679956396e2dcae377cc795ee8f8d1f4c520767a371ec17"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GbUVcfbJ5+iHXhFl0pGugRjyr5Ck9IiVA/HphA679pMAQsXwNe9BK1QRnN/cXq1P0Ukj/RN8gg7ywlm+WSofCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T14:23:27.996225Z","bundle_sha256":"208b3530460329490cb4e699ed78e4161a799306fb1d8ca611dd6cdf56d6c08b"}}