{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:O27FTQOKSSZB2K26SHXYL26DDS","short_pith_number":"pith:O27FTQOK","canonical_record":{"source":{"id":"2606.02196","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-01T12:51:21Z","cross_cats_sorted":[],"title_canon_sha256":"2be43ba90a6493c5fb83f0827c8e826eaba90f82a95e8cf73e7b5a645b9a9987","abstract_canon_sha256":"67e8d26922a75a8b3186a10a8c1862c4af503f61832338e2d4e34851c10fdb96"},"schema_version":"1.0"},"canonical_sha256":"76be59c1ca94b21d2b5e91ef85ebc31c89a4256b5142f6f0ea36b0d0e93cd733","source":{"kind":"arxiv","id":"2606.02196","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.02196","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"arxiv_version","alias_value":"2606.02196v1","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.02196","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"pith_short_12","alias_value":"O27FTQOKSSZB","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"pith_short_16","alias_value":"O27FTQOKSSZB2K26","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"pith_short_8","alias_value":"O27FTQOK","created_at":"2026-06-02T03:04:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:O27FTQOKSSZB2K26SHXYL26DDS","target":"record","payload":{"canonical_record":{"source":{"id":"2606.02196","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-01T12:51:21Z","cross_cats_sorted":[],"title_canon_sha256":"2be43ba90a6493c5fb83f0827c8e826eaba90f82a95e8cf73e7b5a645b9a9987","abstract_canon_sha256":"67e8d26922a75a8b3186a10a8c1862c4af503f61832338e2d4e34851c10fdb96"},"schema_version":"1.0"},"canonical_sha256":"76be59c1ca94b21d2b5e91ef85ebc31c89a4256b5142f6f0ea36b0d0e93cd733","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-02T03:04:52.914451Z","signature_b64":"heZa26V6NYoe5Yu2sAxP6J41xKSr2uy+cX83HzjRxC8d0sLO8Ia55VnsdSetzpUCcsOgU8Bp9J4zFHVyFppFDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"76be59c1ca94b21d2b5e91ef85ebc31c89a4256b5142f6f0ea36b0d0e93cd733","last_reissued_at":"2026-06-02T03:04:52.913971Z","signature_status":"signed_v1","first_computed_at":"2026-06-02T03:04:52.913971Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.02196","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-02T03:04:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4xitXt5fENpId2z+gSF7AhdqiArgDcdrd87bdLh7nx12FX2ypvjbLFQ5Y+RON/XDiIUOOo63fCzOawOOmEmaCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T02:22:35.668286Z"},"content_sha256":"95d628d4c0335ef241903c171d6ebe6d6067d3297affc05366f4d8a41d70233b","schema_version":"1.0","event_id":"sha256:95d628d4c0335ef241903c171d6ebe6d6067d3297affc05366f4d8a41d70233b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:O27FTQOKSSZB2K26SHXYL26DDS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PyFEX: Uncovering Evasive Python-based Threats via Resilient and Exhaustive Path Exploration","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ali Abbasi, Jianqiang Wang, Liwei Guo, Majid Garoosi, Meng Wang, Wenting Fan, Yue Ma","submitted_at":"2026-06-01T12:51:21Z","abstract_excerpt":"The rapid expansion of the Python ecosystem has fueled two distinct but converging threats: adversaries increasingly target the software supply chain via the Python Package Index (PyPI), while also building evasive, cross-platform malicious binaries compiled from source code written in Python. Current program analysis techniques struggle to address this dual threat. Static analysis based tools are often blinded by runtime obfuscation and compiled bytecode, while dynamic analysis based ones are fragile, prone to evasion by environmental guardrails, and often terminates prematurely due to unsati"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.02196","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.02196/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-02T03:04:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L+vFZCTRFywciszpmnHNS6ozNwnuyDvXGih40kglJZZ/bdKLXoxi9RE4OlAa+nt+TkdYNzseseu9IYgQbFIcDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T02:22:35.668682Z"},"content_sha256":"4ad4997e48b39e2a68c7a41357b24a02adcc72027766f73796f71ddec799c4c0","schema_version":"1.0","event_id":"sha256:4ad4997e48b39e2a68c7a41357b24a02adcc72027766f73796f71ddec799c4c0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O27FTQOKSSZB2K26SHXYL26DDS/bundle.json","state_url":"https://pith.science/pith/O27FTQOKSSZB2K26SHXYL26DDS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O27FTQOKSSZB2K26SHXYL26DDS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-03T02:22:35Z","links":{"resolver":"https://pith.science/pith/O27FTQOKSSZB2K26SHXYL26DDS","bundle":"https://pith.science/pith/O27FTQOKSSZB2K26SHXYL26DDS/bundle.json","state":"https://pith.science/pith/O27FTQOKSSZB2K26SHXYL26DDS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O27FTQOKSSZB2K26SHXYL26DDS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:O27FTQOKSSZB2K26SHXYL26DDS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"67e8d26922a75a8b3186a10a8c1862c4af503f61832338e2d4e34851c10fdb96","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-01T12:51:21Z","title_canon_sha256":"2be43ba90a6493c5fb83f0827c8e826eaba90f82a95e8cf73e7b5a645b9a9987"},"schema_version":"1.0","source":{"id":"2606.02196","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.02196","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"arxiv_version","alias_value":"2606.02196v1","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.02196","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"pith_short_12","alias_value":"O27FTQOKSSZB","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"pith_short_16","alias_value":"O27FTQOKSSZB2K26","created_at":"2026-06-02T03:04:52Z"},{"alias_kind":"pith_short_8","alias_value":"O27FTQOK","created_at":"2026-06-02T03:04:52Z"}],"graph_snapshots":[{"event_id":"sha256:4ad4997e48b39e2a68c7a41357b24a02adcc72027766f73796f71ddec799c4c0","target":"graph","created_at":"2026-06-02T03:04:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.02196/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid expansion of the Python ecosystem has fueled two distinct but converging threats: adversaries increasingly target the software supply chain via the Python Package Index (PyPI), while also building evasive, cross-platform malicious binaries compiled from source code written in Python. Current program analysis techniques struggle to address this dual threat. Static analysis based tools are often blinded by runtime obfuscation and compiled bytecode, while dynamic analysis based ones are fragile, prone to evasion by environmental guardrails, and often terminates prematurely due to unsati","authors_text":"Ali Abbasi, Jianqiang Wang, Liwei Guo, Majid Garoosi, Meng Wang, Wenting Fan, Yue Ma","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-01T12:51:21Z","title":"PyFEX: Uncovering Evasive Python-based Threats via Resilient and Exhaustive Path Exploration"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.02196","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:95d628d4c0335ef241903c171d6ebe6d6067d3297affc05366f4d8a41d70233b","target":"record","created_at":"2026-06-02T03:04:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"67e8d26922a75a8b3186a10a8c1862c4af503f61832338e2d4e34851c10fdb96","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-01T12:51:21Z","title_canon_sha256":"2be43ba90a6493c5fb83f0827c8e826eaba90f82a95e8cf73e7b5a645b9a9987"},"schema_version":"1.0","source":{"id":"2606.02196","kind":"arxiv","version":1}},"canonical_sha256":"76be59c1ca94b21d2b5e91ef85ebc31c89a4256b5142f6f0ea36b0d0e93cd733","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"76be59c1ca94b21d2b5e91ef85ebc31c89a4256b5142f6f0ea36b0d0e93cd733","first_computed_at":"2026-06-02T03:04:52.913971Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-02T03:04:52.913971Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"heZa26V6NYoe5Yu2sAxP6J41xKSr2uy+cX83HzjRxC8d0sLO8Ia55VnsdSetzpUCcsOgU8Bp9J4zFHVyFppFDw==","signature_status":"signed_v1","signed_at":"2026-06-02T03:04:52.914451Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.02196","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:95d628d4c0335ef241903c171d6ebe6d6067d3297affc05366f4d8a41d70233b","sha256:4ad4997e48b39e2a68c7a41357b24a02adcc72027766f73796f71ddec799c4c0"],"state_sha256":"7ce90639d1d8af625300110cb517f6a39c3e0ea6ba483a7c65d4a7543ddfc0a4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rBYf1d7AwIvHVwzJi1xQ3gEA6mZc4VKVmQbBoU85Ajk8m78WUfZgebvmvX2mTiuVXNvAYUeTQ3EQqrpgND5pBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-03T02:22:35.670970Z","bundle_sha256":"105d575b4482243556d4825cda0a89b34642905a163677c3bdce2719d64be764"}}