{"as_of":"2026-08-17T02:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0a78497ab07766a2e8a18eba6b79b0f242849b365b7cc8e0662286e698bf0f53","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":19,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":19,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":19,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":19,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T23:18:32.241849Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T12:08:07.338748Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-11T11:25:10.560269Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.15503","last_updated":"2024-12-20T02:32:55Z","snapshot_observed_at":"2026-08-15T21:18:12.921724Z","submitted_at":"2024-12-20T02:32:55Z","title":"Meme Trojan: Backdoor Attacks Against Hateful Meme Detection via Cross-Modal Triggers","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-11T11:25:10.560269Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2412.15503"},"observation_digest":"sha256:71e8d7ec8dc149b58e580d8e220ef1c4470a61a0955e3db3e8f0fd169221eb48","observation_id":"537fc145-5850-4e9f-8e22-650750d978a9","resolution":{"observed_at":"2026-08-11T11:25:10.560269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.08577","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-07-03T12:08:07.338748Z","title":"Test-time backdoor attacks on multimodal large language models","venue":null,"work_id":"b09306a7-7aa4-4e83-912d-c669faa75106","year":2024},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-08-15T21:07:34.234107Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":296,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:4529d8fb685b16177a6c80a1662aa6dcc0086c8b11a6eb0fa48f112f040ace31","observation_id":"32020907-06e3-4339-9109-0f08cc7f5016","resolution":{"observed_at":"2026-05-23T04:42:34.010130Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-08T19:15:25.419051Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06872","last_updated":"2025-02-08T06:50:47Z","snapshot_observed_at":"2026-08-16T08:10:55.902848Z","submitted_at":"2025-02-08T06:50:47Z","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","version":1},"reference_index":112,"source":"pdf_text","source_observed_at":"2026-08-08T19:15:25.419051Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2502.06872"},"observation_digest":"sha256:c10d2ada4ee6bcbb783b4c06ce43c0c113d659094cf71298303d750579540996","observation_id":"1b6bcdd3-7ddc-4d98-8c01-9f6f9e7878f2","resolution":{"observed_at":"2026-08-08T19:15:25.419051Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-08T11:32:42.862012Z","title":"arXiv preprint arXiv:2402.08577 (2024) DeepSeek on a Trip: Inducing Targeted Visual Hallucinations 17","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.07905","last_updated":"2025-02-11T19:21:23Z","snapshot_observed_at":"2026-08-16T01:43:58.551249Z","submitted_at":"2025-02-11T19:21:23Z","title":"DeepSeek on a Trip: Inducing Targeted Visual Hallucinations via Representation Vulnerabilities","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T11:32:42.862012Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2502.07905"},"observation_digest":"sha256:70796765d05931710624f103f9f802659177cf36fa34dbc361d2f4678f755ad3","observation_id":"07b735f0-70f8-415f-8953-c1f672108974","resolution":{"observed_at":"2026-08-08T11:32:42.862012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-07T19:45:19.277633Z","title":"Test-time backdoor attacks on multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-12T22:07:51.112849Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-07T19:45:19.277633Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2502.14881"},"observation_digest":"sha256:672e8ac6c0e9feb3b4f8d51d45aa391255198af138a47befa95b2123593d248b","observation_id":"aac4aecb-fb4b-424e-92bb-8e7ed2470028","resolution":{"observed_at":"2026-08-07T19:45:19.277633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-15T23:18:32.241849Z","title":"Test-time backdoor attacks on multimodal large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05528","last_updated":"2025-05-29T23:50:01Z","snapshot_observed_at":"2026-08-16T02:19:24.914483Z","submitted_at":"2025-05-08T11:59:13Z","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","version":3},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-08-15T23:18:32.241849Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2505.05528"},"observation_digest":"sha256:e52111ccb116e01fbcce257a7da8c090f4485f6b3430fd96928cf581006c5b82","observation_id":"140d78ef-c872-4793-994b-f44ae29d2dd8","resolution":{"observed_at":"2026-08-15T23:18:32.241849Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-15T22:46:49.584660Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06413","last_updated":"2025-05-09T20:28:17Z","snapshot_observed_at":"2026-08-15T23:54:16.025786Z","submitted_at":"2025-05-09T20:28:17Z","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T22:46:49.584660Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2505.06413"},"observation_digest":"sha256:c93f399687d624543c0c5a14b2f87d057ffe04d43b586ccd174ce43d4fd5431f","observation_id":"5066049a-ab04-4ef0-bbe0-570ce42b4938","resolution":{"observed_at":"2026-08-15T22:46:49.584660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-07T05:45:56.076595Z","title":"Test-time backdoor attacks on multimodal large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07214","last_updated":"2025-06-08T16:40:40Z","snapshot_observed_at":"2026-08-17T01:31:03.836304Z","submitted_at":"2025-06-08T16:40:40Z","title":"Backdoor Attack on Vision Language Models with Stealthy Semantic Manipulation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:45:56.076595Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2506.07214"},"observation_digest":"sha256:55cf1aa8e067de72b861533fe653dd32821e64ad7e24e0f2a671a049cf8ac0dd","observation_id":"88009e1d-8e5f-48af-b396-c6847873649b","resolution":{"observed_at":"2026-08-07T05:45:56.076595Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-05T21:22:37.567944Z","title":"Test-time backdoor attacks on multimodal large language models.arXiv preprint arXiv:2402.08577,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.09237","last_updated":"2025-08-12T12:11:43Z","snapshot_observed_at":"2026-08-14T06:01:12.421950Z","submitted_at":"2025-08-12T12:11:43Z","title":"Blockchain Network Analysis using Quantum Inspired Graph Neural Networks & Ensemble Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T21:22:37.567944Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2508.09237"},"observation_digest":"sha256:827334847da27fc6a585a1a34eef4f73bb853e4c4839145f49d5e4022c867e98","observation_id":"9c830edc-37ac-4f4c-8ea0-60eb5495fc5e","resolution":{"observed_at":"2026-08-05T21:22:37.567944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-04T22:06:30.759059Z","title":"Ma, H.; Li, Y .; Gao, Y .; Abuadbba, A.; Zhang, Z.; Fu, A.; Kim, H.; Al-Sarawi, S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.759059Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:d91299a283da779fcdd80f1b27d235bf11a23d54a1f72632016fa14d2e8d38e0","observation_id":"fae53a06-553d-41e2-8406-81334b9ae269","resolution":{"observed_at":"2026-08-04T22:06:30.759059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-04T13:52:15.754818Z","title":"Under review","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.24566","last_updated":"2026-07-16T09:55:58Z","snapshot_observed_at":"2026-08-16T07:58:25.495952Z","submitted_at":"2025-09-29T10:19:22Z","title":"TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T13:52:15.754818Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2509.24566"},"observation_digest":"sha256:283097b4c430cb44462135ab1096857423565d7d2a0886e47a5c8f1362636a51","observation_id":"33056750-e783-4f60-bf84-9113e1beb982","resolution":{"observed_at":"2026-08-04T13:52:15.754818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-03T20:27:03.844504Z","title":"semanticscholar.org/CorpusID:17707860","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2511.20002","last_updated":"2026-06-17T05:14:08Z","snapshot_observed_at":"2026-08-03T20:27:02.365537Z","submitted_at":"2025-11-25T07:13:13Z","title":"Semantic Router: On the Feasibility of Hijacking MLLMs via a Single Adversarial Perturbation","version":3},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-03T20:27:03.844504Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2511.20002"},"observation_digest":"sha256:ada8df5eeef76666dc877a217d6bc5bc5911d4a6ed93e3653cda4b1442a0e512","observation_id":"3b772790-200c-4a53-a3ca-7fbc3df925e5","resolution":{"observed_at":"2026-08-03T20:27:03.844504Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.08577","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-07-03T12:08:07.338748Z","title":"Test-time backdoor attacks on multimodal large language models","venue":null,"work_id":"b09306a7-7aa4-4e83-912d-c669faa75106","year":2024},"citing_paper":{"arxiv_id":"2604.04630","last_updated":"2026-04-06T12:29:49Z","snapshot_observed_at":"2026-08-16T23:45:01.753809Z","submitted_at":"2026-04-06T12:29:49Z","title":"Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-10T20:30:29.032353Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2604.04630"},"observation_digest":"sha256:b719409f2641f266e5cc08a819d7c37b75d1c6d51748f59e90940955a9b813bc","observation_id":"6f4e0e43-bba1-4d41-bed1-43d54aacd5c3","resolution":{"observed_at":"2026-05-10T21:55:49.788573Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.08577","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-07-03T12:08:07.338748Z","title":"Test-time backdoor attacks on multimodal large language models","venue":null,"work_id":"b09306a7-7aa4-4e83-912d-c669faa75106","year":2024},"citing_paper":{"arxiv_id":"2604.08395","last_updated":"2026-04-09T15:55:33Z","snapshot_observed_at":"2026-07-06T22:57:31.046146Z","submitted_at":"2026-04-09T15:55:33Z","title":"Phantasia: Context-Adaptive Backdoors in Vision Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-10T17:46:01.742050Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2604.08395"},"observation_digest":"sha256:2ccdde54baa348690f2e74feaee2c20a04f18868e753d46f71803a440a4e363e","observation_id":"b6c0ee34-e4a8-46bc-8fc7-890a5c01dc28","resolution":{"observed_at":"2026-05-11T06:11:01.076713Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.08577","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-07-03T12:08:07.338748Z","title":"Test-time backdoor attacks on multimodal large language models","venue":null,"work_id":"b09306a7-7aa4-4e83-912d-c669faa75106","year":2024},"citing_paper":{"arxiv_id":"2604.19083","last_updated":"2026-04-21T04:52:38Z","snapshot_observed_at":"2026-08-17T00:05:16.447005Z","submitted_at":"2026-04-21T04:52:38Z","title":"ProjLens: Unveiling the Role of Projectors in Multimodal Model Safety","version":1},"reference_index":162,"source":"arxiv_source","source_observed_at":"2026-05-10T03:00:34.862711Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2604.19083"},"observation_digest":"sha256:73cad2b28c697042fd9db61d75dcca828660866aae9a0a124d0fb08d70abb063","observation_id":"f3ff86c0-93db-4783-bc01-f70962d54ec6","resolution":{"observed_at":"2026-05-11T12:46:06.205915Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.08577","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-07-03T12:08:07.338748Z","title":"Test-time backdoor attacks on multimodal large language models","venue":null,"work_id":"b09306a7-7aa4-4e83-912d-c669faa75106","year":2024},"citing_paper":{"arxiv_id":"2605.15711","last_updated":"2026-05-15T08:01:32Z","snapshot_observed_at":"2026-08-16T20:30:55.833411Z","submitted_at":"2026-05-15T08:01:32Z","title":"EntropyScan: Towards Model-level Backdoor Detection in LVLMs via Visual Attention Entropy","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-20T19:46:49.000647Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2605.15711"},"observation_digest":"sha256:02dd3b33e95b8225f4e321fa8ba78b31c421aae7076cca708b464571351de5bb","observation_id":"cb924097-8527-4a52-b542-3c144e7fdf94","resolution":{"observed_at":"2026-05-20T19:48:57.440187Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.08577","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-07-03T12:08:07.338748Z","title":"Test-time backdoor attacks on multimodal large language models","venue":null,"work_id":"b09306a7-7aa4-4e83-912d-c669faa75106","year":2024},"citing_paper":{"arxiv_id":"2606.02947","last_updated":"2026-06-01T22:58:04Z","snapshot_observed_at":"2026-08-06T10:00:20.246943Z","submitted_at":"2026-06-01T22:58:04Z","title":"BYORn: Bootstrap Your Own Responses to Defend Large Vision-Language Models Against Backdoor Attacks","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-06-28T15:10:18.936026Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2606.02947"},"observation_digest":"sha256:1b5247ef590e2aaf7946833d032c340dcf8494929379c9ef892c48e5899fe6d9","observation_id":"d4cd583d-c60a-42bd-8754-1851a7f5f672","resolution":{"observed_at":"2026-07-01T22:36:17.848260Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.08577","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-07-03T12:08:07.338748Z","title":"Test-time backdoor attacks on multimodal large language models","venue":null,"work_id":"b09306a7-7aa4-4e83-912d-c669faa75106","year":2024},"citing_paper":{"arxiv_id":"2606.12586","last_updated":"2026-06-10T18:33:52Z","snapshot_observed_at":"2026-08-15T13:25:06.411859Z","submitted_at":"2026-06-10T18:33:52Z","title":"Beyond Attack Success Rate: Examining Trigger Leakage in Vision-Language Agentic Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T09:05:09.927020Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2606.12586"},"observation_digest":"sha256:f33ab4159d01dbfa2d26782e6d3f8028f2287ab2f0927924eb6631b0297aa931","observation_id":"4e3cb434-0abc-46bf-b52c-6ae156014f6f","resolution":{"observed_at":"2026-07-03T12:08:07.340504Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":"2402.08577","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-07-03T12:08:07.338748Z","title":"Test-time backdoor attacks on multimodal large language models","venue":null,"work_id":"b09306a7-7aa4-4e83-912d-c669faa75106","year":2024},"citing_paper":{"arxiv_id":"2607.00361","last_updated":"2026-07-01T02:59:59Z","snapshot_observed_at":"2026-08-12T17:12:46.155901Z","submitted_at":"2026-07-01T02:59:59Z","title":"ReShift: Aha-Moment-Driven Reasoning-Level Backdoor Attacks on Vision-Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-02T11:48:35.972372Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2607.00361"},"observation_digest":"sha256:3c6b8b9ef2f90f5a213a3a1bb33355a838cd07f751d2f5b4a6bcdb1bbf8cd4cc","observation_id":"c0bef60e-2812-4866-a670-8abeaf75327b","resolution":{"observed_at":"2026-07-02T11:56:55.007383Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2402.08577/citation-record","integrity":"/paper/2402.08577/integrity","json":"/paper/2402.08577/citation-record.json","paper":"/paper/2402.08577"},"outbound":[],"paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-16T14:18:55.259827Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 19 inbound Pith citation observations for arXiv:2402.08577."}