{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:ZQS2EAADS3QYGTM5DUFTSCHEX4","short_pith_number":"pith:ZQS2EAAD","canonical_record":{"source":{"id":"2405.02828","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-05-05T06:43:52Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c70df52df9019393d0e4690f6b580ef2455829958f563d48274dfede8f495e70","abstract_canon_sha256":"4e13a5b047f739deeba71ad087f031f83c8a1978e765d48b8efd191fe01bdce3"},"schema_version":"1.0"},"canonical_sha256":"cc25a2000396e1834d9d1d0b3908e4bf094673864a2001bcd65c80a20e94ebfd","source":{"kind":"arxiv","id":"2405.02828","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.02828","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"arxiv_version","alias_value":"2405.02828v1","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.02828","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"pith_short_12","alias_value":"ZQS2EAADS3QY","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"pith_short_16","alias_value":"ZQS2EAADS3QYGTM5","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"pith_short_8","alias_value":"ZQS2EAAD","created_at":"2026-07-05T08:15:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:ZQS2EAADS3QYGTM5DUFTSCHEX4","target":"record","payload":{"canonical_record":{"source":{"id":"2405.02828","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-05-05T06:43:52Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c70df52df9019393d0e4690f6b580ef2455829958f563d48274dfede8f495e70","abstract_canon_sha256":"4e13a5b047f739deeba71ad087f031f83c8a1978e765d48b8efd191fe01bdce3"},"schema_version":"1.0"},"canonical_sha256":"cc25a2000396e1834d9d1d0b3908e4bf094673864a2001bcd65c80a20e94ebfd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:15:54.539161Z","signature_b64":"OHNRR8+8ZvHfTC5dF64Bmb+OBG8AhB8rTJMEHNcQY23oTEqBfQu644/d4ZgjQkxPsqljc501ryvnIX1EholDCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cc25a2000396e1834d9d1d0b3908e4bf094673864a2001bcd65c80a20e94ebfd","last_reissued_at":"2026-07-05T08:15:54.538636Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:15:54.538636Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.02828","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:15:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K/mm0lMToFaQLJDmJvtSk5EJCTYZ8MV+64gY7HdFIMQvvJ3MuNs6x/MuqnPFAEVCEADOkKIk3g4VOMSbxwsxBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T06:55:53.045751Z"},"content_sha256":"4b557bc7ffc39185bfa7795e5df97b637cf0533dd600d117a86da852f2946bbd","schema_version":"1.0","event_id":"sha256:4b557bc7ffc39185bfa7795e5df97b637cf0533dd600d117a86da852f2946bbd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:ZQS2EAADS3QYGTM5DUFTSCHEX4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Trojans in Large Language Models of Code: A Critical Review through a Trigger-Based Taxonomy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.SE","authors_text":"Aftab Hussain, Bowen Xu, Md Rafiqul Islam Rabin, Mohammad Amin Alipour, Premkumar Devanbu, Toufique Ahmed","submitted_at":"2024-05-05T06:43:52Z","abstract_excerpt":"Large language models (LLMs) have provided a lot of exciting new capabilities in software development. However, the opaque nature of these models makes them difficult to reason about and inspect. Their opacity gives rise to potential security risks, as adversaries can train and deploy compromised models to disrupt the software development process in the victims' organization.\n  This work presents an overview of the current state-of-the-art trojan attacks on large language models of code, with a focus on triggers -- the main design point of trojans -- with the aid of a novel unifying trigger ta"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.02828","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.02828/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:15:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fe0+qOu0LFdQO7c2SXSdIIXq7SR0m3iOulNJZgRzwQtH4ysuhytA6mu8ogiBBrCKz/3kL7uZBGKdabW64ffaAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T06:55:53.046474Z"},"content_sha256":"2e47121b30e386e367d1351cc78cff448483b9b47f7681bfbf365ee399f04756","schema_version":"1.0","event_id":"sha256:2e47121b30e386e367d1351cc78cff448483b9b47f7681bfbf365ee399f04756"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZQS2EAADS3QYGTM5DUFTSCHEX4/bundle.json","state_url":"https://pith.science/pith/ZQS2EAADS3QYGTM5DUFTSCHEX4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZQS2EAADS3QYGTM5DUFTSCHEX4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T06:55:53Z","links":{"resolver":"https://pith.science/pith/ZQS2EAADS3QYGTM5DUFTSCHEX4","bundle":"https://pith.science/pith/ZQS2EAADS3QYGTM5DUFTSCHEX4/bundle.json","state":"https://pith.science/pith/ZQS2EAADS3QYGTM5DUFTSCHEX4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZQS2EAADS3QYGTM5DUFTSCHEX4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:ZQS2EAADS3QYGTM5DUFTSCHEX4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4e13a5b047f739deeba71ad087f031f83c8a1978e765d48b8efd191fe01bdce3","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-05-05T06:43:52Z","title_canon_sha256":"c70df52df9019393d0e4690f6b580ef2455829958f563d48274dfede8f495e70"},"schema_version":"1.0","source":{"id":"2405.02828","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.02828","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"arxiv_version","alias_value":"2405.02828v1","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.02828","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"pith_short_12","alias_value":"ZQS2EAADS3QY","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"pith_short_16","alias_value":"ZQS2EAADS3QYGTM5","created_at":"2026-07-05T08:15:54Z"},{"alias_kind":"pith_short_8","alias_value":"ZQS2EAAD","created_at":"2026-07-05T08:15:54Z"}],"graph_snapshots":[{"event_id":"sha256:2e47121b30e386e367d1351cc78cff448483b9b47f7681bfbf365ee399f04756","target":"graph","created_at":"2026-07-05T08:15:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.02828/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have provided a lot of exciting new capabilities in software development. However, the opaque nature of these models makes them difficult to reason about and inspect. Their opacity gives rise to potential security risks, as adversaries can train and deploy compromised models to disrupt the software development process in the victims' organization.\n  This work presents an overview of the current state-of-the-art trojan attacks on large language models of code, with a focus on triggers -- the main design point of trojans -- with the aid of a novel unifying trigger ta","authors_text":"Aftab Hussain, Bowen Xu, Md Rafiqul Islam Rabin, Mohammad Amin Alipour, Premkumar Devanbu, Toufique Ahmed","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-05-05T06:43:52Z","title":"Trojans in Large Language Models of Code: A Critical Review through a Trigger-Based Taxonomy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.02828","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4b557bc7ffc39185bfa7795e5df97b637cf0533dd600d117a86da852f2946bbd","target":"record","created_at":"2026-07-05T08:15:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4e13a5b047f739deeba71ad087f031f83c8a1978e765d48b8efd191fe01bdce3","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-05-05T06:43:52Z","title_canon_sha256":"c70df52df9019393d0e4690f6b580ef2455829958f563d48274dfede8f495e70"},"schema_version":"1.0","source":{"id":"2405.02828","kind":"arxiv","version":1}},"canonical_sha256":"cc25a2000396e1834d9d1d0b3908e4bf094673864a2001bcd65c80a20e94ebfd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cc25a2000396e1834d9d1d0b3908e4bf094673864a2001bcd65c80a20e94ebfd","first_computed_at":"2026-07-05T08:15:54.538636Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:15:54.538636Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OHNRR8+8ZvHfTC5dF64Bmb+OBG8AhB8rTJMEHNcQY23oTEqBfQu644/d4ZgjQkxPsqljc501ryvnIX1EholDCg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:15:54.539161Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.02828","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4b557bc7ffc39185bfa7795e5df97b637cf0533dd600d117a86da852f2946bbd","sha256:2e47121b30e386e367d1351cc78cff448483b9b47f7681bfbf365ee399f04756"],"state_sha256":"619b217942486819bf8e167017f98bb17e289440b7bbd69787e7ae38247fa5e9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i5i9UvqZDHrEzUuZC3ZOvrZs7CPgBjVmXUONHI+4lzHoFUPL03n2dcEEE9KBmQHtpD/rFivqf+jDF3/n+AWwBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T06:55:53.052323Z","bundle_sha256":"a750faa3ba6cf63af6d8aa866d9211562e19884875127483f6460a2e2c36b136"}}