{"as_of":"2026-08-20T07:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ea475034ff9aeaf17679a845bb62e3ff7f19a02e05375a64b1a0151581e12042","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T05:26:05.889006Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T01:09:19.761353Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-08-10T22:17:13.830628Z","title":"A large-scale exploit instru- mentation study of ai/ml supply chain attacks in hugging face models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.02170","last_updated":"2025-01-04T03:04:56Z","snapshot_observed_at":"2026-08-19T03:09:56.396354Z","submitted_at":"2025-01-04T03:04:56Z","title":"An Empirical Study of Safetensors' Usage Trends and Developers' Perceptions","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T22:17:13.830628Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2501.02170"},"observation_digest":"sha256:ba77e02e9fba9827f27a5b4e5151ed94033abc2c42090e049e748255a8e5ae90","observation_id":"7de80d4a-defe-43f6-bf56-9d3479b2fbc3","resolution":{"observed_at":"2026-08-10T22:17:13.830628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-08-16T05:26:05.889006Z","title":"A large-scale exploit instrumentation study of AI/ML supply chain attacks in hugging face models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.20763","last_updated":"2026-07-09T12:41:28Z","snapshot_observed_at":"2026-08-19T03:07:03.191939Z","submitted_at":"2025-04-29T13:44:01Z","title":"Unveiling Large Language Model Supply Chain: Structure, Domain, and Vulnerabilities","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-16T05:26:05.889006Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2504.20763"},"observation_digest":"sha256:0f0d3db8e3bd59a93d28d7d1426271441b10ba4b0e0ae48459402eb478feaf12","observation_id":"92ddbb7e-c339-442f-9b70-67518f65c63f","resolution":{"observed_at":"2026-08-16T05:26:05.889006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":"2410.04490","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-07-04T01:09:19.761353Z","title":null,"venue":null,"work_id":"612004e2-0985-4f65-a3ce-4e6e1d808707","year":2024},"citing_paper":{"arxiv_id":"2604.19438","last_updated":"2026-04-21T13:12:42Z","snapshot_observed_at":"2026-08-14T19:00:13.495159Z","submitted_at":"2026-04-21T13:12:42Z","title":"Malicious ML Model Detection by Learning Dynamic Behaviors","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-10T02:44:55.161515Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2604.19438"},"observation_digest":"sha256:179381d98fd3c731ba8417a9d23c6424a3dce89d7c9a18c7eb1209f54dc905c7","observation_id":"39b4a48e-3855-4704-b846-32deb50979a3","resolution":{"observed_at":"2026-05-11T12:51:03.377951Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":"2410.04490","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-07-04T01:09:19.761353Z","title":null,"venue":null,"work_id":"612004e2-0985-4f65-a3ce-4e6e1d808707","year":2024},"citing_paper":{"arxiv_id":"2606.19023","last_updated":"2026-06-17T12:49:22Z","snapshot_observed_at":"2026-08-09T19:44:12.563481Z","submitted_at":"2026-06-17T12:49:22Z","title":"Lifecycle-Aware Dynamic Analysis for Secure ML Model Execution","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-26T20:34:32.366757Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2606.19023"},"observation_digest":"sha256:6cb239e19fb8e2b785e6d9cf955d76e79b3d781575891e86c490b4c94f3b3a04","observation_id":"cda18d74-c60a-4626-a026-cbadd7fbbe15","resolution":{"observed_at":"2026-07-04T01:09:19.763275Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-08-01T18:40:15.415907Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17242","last_updated":"2026-07-19T13:20:09Z","snapshot_observed_at":"2026-08-14T09:56:56.066572Z","submitted_at":"2026-07-19T13:20:09Z","title":"A Large-Scale Measurement of AI Bill of Materials Completeness in Hugging Face Models","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-01T18:40:15.415907Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2607.17242"},"observation_digest":"sha256:44dc3a5cb7141d8a320c05ccce1f6a8f2ef769bd622cca1c5efb57293af41e24","observation_id":"ccf9f59a-ca14-41c5-a0e6-a4095f7eee3d","resolution":{"observed_at":"2026-08-01T18:40:15.415907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-08-01T17:51:45.697781Z","title":"A large-scale exploit instrumentation study of ai/ml supply chain attacks in hugging face models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.697781Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:01cd800154433769eb756d32e3b7880ffbff9477388faa6d820829a4341d7908","observation_id":"788e046b-46af-4838-a942-57e1876bf66b","resolution":{"observed_at":"2026-08-01T17:51:45.697781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-08-01T02:40:29.439050Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25379","last_updated":"2026-08-01T10:03:47Z","snapshot_observed_at":"2026-08-19T00:44:48.503034Z","submitted_at":"2026-07-28T07:34:37Z","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-01T02:40:29.439050Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2607.25379"},"observation_digest":"sha256:6ab7ce1570267cefda11371ef87dc79999503ad4241f869e92b2202329ebe11c","observation_id":"9597ac84-c938-4756-a278-f40b9a4148f8","resolution":{"observed_at":"2026-08-01T02:40:29.439050Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-08-04T01:33:22.018563Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25379","last_updated":"2026-08-01T10:03:47Z","snapshot_observed_at":"2026-08-19T00:44:48.503034Z","submitted_at":"2026-07-28T07:34:37Z","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:22.018563Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2607.25379"},"observation_digest":"sha256:c09298f49061960159fb2e637ea0e9c04592a78f6c9549e4207cdb67f3074a99","observation_id":"d5cca33b-e34b-4e15-9214-34a7f78f3903","resolution":{"observed_at":"2026-08-04T01:33:22.018563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.04490/citation-record","integrity":"/paper/2410.04490/integrity","json":"/paper/2410.04490/citation-record.json","paper":"/paper/2410.04490"},"outbound":[],"paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2410.04490."}