{"as_of":"2026-08-19T05:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:571a2053a90999812e4f0ae05bcd96ccc972defe653e279dfddd6c89da3f72b5","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T12:03:43.361305Z","state":"measured"},{"denominator":44,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":44,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T23:03:25.790976Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T19:07:18.276390Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"cited_work":{"arxiv_id":"2504.13769","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.13769","snapshot_observed_at":"2026-07-02T19:07:18.276390Z","title":"Detecting malicious source code in PyPI packages with LLMs: Does RAG come in handy?","venue":null,"work_id":"9c811e4b-d2f7-4a4c-9ba2-ee895934baab","year":2025},"citing_paper":{"arxiv_id":"2606.07792","last_updated":"2026-06-05T19:10:31Z","snapshot_observed_at":"2026-08-12T14:18:39.327671Z","submitted_at":"2026-06-05T19:10:31Z","title":"MOLOT System Card: Malicious Operational Logic Observation Transformer","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-27T21:38:55.236058Z"},"links":{"cited_paper":"/paper/2504.13769","citing_paper":"/paper/2606.07792"},"observation_digest":"sha256:1f89f36ce9a4fef2e3a1f046e250dd133391cc898aaa167c0ed933000622a73e","observation_id":"973e9801-4b7a-4d7f-9a82-01348c23ea30","resolution":{"observed_at":"2026-07-02T19:07:18.278059Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.13769","snapshot_observed_at":"2026-08-05T23:03:25.790976Z","title":"Nguyen, Claudio Di Sipio, and Davide Di Ruscio","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03232","last_updated":"2026-08-04T07:03:49Z","snapshot_observed_at":"2026-08-17T20:12:21.854205Z","submitted_at":"2026-08-04T07:03:49Z","title":"MalTotal: Cost-Effective and Language-Agnostic Malicious Code Poisoning Detection for Millions of Repositories","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T23:03:25.790976Z"},"links":{"cited_paper":"/paper/2504.13769","citing_paper":"/paper/2608.03232"},"observation_digest":"sha256:4c377d04ed1c5f0525168e35ca746348cd7fa36ff994da409dae87c1c35243cc","observation_id":"760af3f7-fa46-48c2-bea7-06939544f992","resolution":{"observed_at":"2026-08-05T23:03:25.790976Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2504.13769/citation-record","integrity":"/paper/2504.13769/integrity","json":"/paper/2504.13769/citation-record.json","paper":"/paper/2504.13769"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.616523Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","venue":null,"work_id":"28c89de3-e085-4ab5-9839-90a0e33e178b","year":2025},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.170070Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:fbfe0362edc1f60fe4042916e83d9b5c54553daa83c31f8839e71137ceb21e82","observation_id":"a2c2100c-0f81-4db4-8c73-d1b8dd26eed0","resolution":{"observed_at":"2026-08-16T12:03:44.621762Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.600585Z","title":"Tuck, Rakesh M","venue":null,"work_id":"3b7597a8-6556-452a-b35e-fcbba1fd3a04","year":null},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.175487Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:da9edddea9e5ca4be4d7a3e103038764285448b4dc89d78a83d42e552abf8345","observation_id":"4dbf9cdf-b92d-4258-add1-df7bfef91b08","resolution":{"observed_at":"2026-08-16T12:03:44.605351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.185243Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.185243Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:4a4b9e7a4cc173785a74c4823ec1c702a0cf8466abb8e0df7e8179eca38d52e2","observation_id":"6883c057-5ff1-467b-b48e-c2ce447ea7db","resolution":{"observed_at":"2026-08-16T12:03:43.185243Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.586447Z","title":null,"venue":null,"work_id":"7814f3a5-2770-45df-aec2-9801602939e6","year":2017},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.190315Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:4ce8fffa70b7da55be3139532b1324d320ecfbcd58c116e384145524b0292d03","observation_id":"3945f105-4ada-4177-900c-ad1e3b1e3cf9","resolution":{"observed_at":"2026-08-16T12:03:44.590676Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.11147","last_updated":"2025-06-17T15:07:17Z","snapshot_observed_at":"2026-08-16T13:42:27.339640Z","submitted_at":"2024-06-17T02:25:45Z","title":"Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAG","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.11147","snapshot_observed_at":"2026-08-16T12:03:43.195091Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.195091Z"},"links":{"cited_paper":"/paper/2406.11147","citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:baee731b9a1c1a7c83c2720993d319eaa50bf08fe2a92b2bcf40dbf07c217e84","observation_id":"14c0ba75-ee57-4980-bc99-ee4e54017564","resolution":{"observed_at":"2026-08-16T12:03:43.195091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.200159Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.200159Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:0f400741527c928a900e817f2c705a9ff8aceba1c243edab654266f721541003","observation_id":"78db0ede-c935-4cef-81ee-e5eaa67af947","resolution":{"observed_at":"2026-08-16T12:03:43.200159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.571975Z","title":null,"venue":null,"work_id":"a748d0a4-d401-4247-86fd-d5f993f0b8d5","year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.204884Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:4d57b00a9fc53fbb32935cfc7d8deaa29290120dfa473542411730315d271c68","observation_id":"470a0802-6d4f-41c4-b816-d09484620d80","resolution":{"observed_at":"2026-08-16T12:03:44.576583Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.555504Z","title":null,"venue":null,"work_id":"8a0199cc-7700-4f2f-ac8f-ba485afb92f1","year":2022},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.209997Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:5d6004e40feb21f54811dcac4c9c4b7661ddbacb848445978e7de66c205cc74a","observation_id":"380b67ff-e855-47b3-bde6-a75a2a1ecab7","resolution":{"observed_at":"2026-08-16T12:03:44.560260Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-16T12:03:43.214615Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.214615Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:08fba3329d4c1d4f01fe75f44e10aab83aafeeff6ac0dfaa68bd28e6255cf939","observation_id":"f986953e-33a4-4edf-9d28-d3e80a7b840f","resolution":{"observed_at":"2026-08-16T12:03:43.214615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.539763Z","title":null,"venue":null,"work_id":"4d931532-192c-44a6-a8be-8630a1b52543","year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.220293Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:30bfd022b81d673810676edfcd6c8c9821864e43029b8862d38344ed971ff334","observation_id":"c857eddc-b52d-4a5e-b9c5-9ef173207aa8","resolution":{"observed_at":"2026-08-16T12:03:44.544685Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.225114Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.225114Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:4b4c32db6f911c6f3f4b0063323369eff88ece5a7f38d918a6d982e2e2ccc2fb","observation_id":"7ab321c8-f04a-4ced-b28a-b1530d8e4046","resolution":{"observed_at":"2026-08-16T12:03:43.225114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.17788","last_updated":"2024-07-25T05:42:14Z","snapshot_observed_at":"2026-08-16T13:31:13.260198Z","submitted_at":"2024-07-25T05:42:14Z","title":"PenHeal: A Two-Stage LLM Framework for Automated Pentesting and Optimal Remediation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.17788","snapshot_observed_at":"2026-08-16T12:03:43.233878Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.233878Z"},"links":{"cited_paper":"/paper/2407.17788","citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:ce9c1063691c1119e5be6b70fb6ffb175cbe953cdc5eda8f8050031c1349dee4","observation_id":"dc595a1b-1618-4bcf-879c-c66540a5251c","resolution":{"observed_at":"2026-08-16T12:03:43.233878Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.238494Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.238494Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:24b8fd9db96dd304fbb733efb9d96924b950b38bc0e9c4f40dcc97ed510d02c9","observation_id":"c237c161-9431-4e1c-9754-752623fe1ac8","resolution":{"observed_at":"2026-08-16T12:03:43.238494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.242900Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.242900Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:d1b5302b110cc3e4eac59914db50c8e95ec84246513be6faa69167d03bdb80b7","observation_id":"3a16a6b8-f9c1-49ca-818f-78d93c5a4d0a","resolution":{"observed_at":"2026-08-16T12:03:43.242900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.247181Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.247181Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:7c104688888475de023d45d4ec40301aada1459963506564b2cb46762db413df","observation_id":"a752230b-8747-411e-82d0-75ccfb77d500","resolution":{"observed_at":"2026-08-16T12:03:43.247181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.251651Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.251651Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:47ce8fdece2122d9aefca09829bd3b0ca650309fb76b6cde3f35c7deb85ae1e5","observation_id":"2e29aebc-f00d-45ad-8fef-7f7ccdbdac7e","resolution":{"observed_at":"2026-08-16T12:03:43.251651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.513986Z","title":null,"venue":null,"work_id":"5f7c1a43-2e4c-4207-abfa-3f8f0f778a81","year":2023},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.255752Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:5060577d6b0dd39bb9e7213b829c64bb69926965479880d9be7582decd00bb0e","observation_id":"07e45e34-e839-41ac-a355-b68a36d8cc61","resolution":{"observed_at":"2026-08-16T12:03:44.518964Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.259590Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.259590Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:b2073e180e9dfef8b9c85109df2f21880d7ce86aafe06858338612911a85e2ef","observation_id":"7782b752-4328-433b-a2b6-b12465768bf4","resolution":{"observed_at":"2026-08-16T12:03:43.259590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.263730Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.263730Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:81ad1ef807b8a4d6e73da2446257a7a0713389da8269a471349888f0ffce151f","observation_id":"08bdddf0-2417-476c-b91b-9fb405e96a7e","resolution":{"observed_at":"2026-08-16T12:03:43.263730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.268547Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.268547Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:7ad8bda71eabad55c1abf4539b3d51ea1ef52d011946a0be6ec32804a1ca231d","observation_id":"4380b793-f7dc-4342-b8cd-4fa307002940","resolution":{"observed_at":"2026-08-16T12:03:43.268547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2021.00091","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.752008Z","title":null,"venue":null,"work_id":"d8a0d541-d045-42bc-a5ce-0e07ecf1c6b7","year":2021},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.273103Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:59f83d39bf2363873c831e34b1b91d81e62b45c39b493714b9a407f8c28bc20d","observation_id":"f8b18901-a58a-4084-b5d0-485238726e76","resolution":{"observed_at":"2026-08-16T12:03:43.758920Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.488727Z","title":null,"venue":null,"work_id":"ca8ff5a2-052f-4d04-861b-81ee9a52580d","year":2021},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.277657Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:b30cf82b98b2b8ccc14d2377ab1bc3b89f7620ca81024cde44b07b64afac3774","observation_id":"11288890-7bb0-4831-a686-7b0f4afa6e35","resolution":{"observed_at":"2026-08-16T12:03:44.493710Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.473813Z","title":null,"venue":null,"work_id":"2a395124-34e1-4452-ab0f-33064461d606","year":2020},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.282274Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:0187da2049fb64ef056f8182b8d60a7eb4da6a723161aae77038c0aaeb876bee","observation_id":"a42624ca-7677-42d0-845f-a4f03166b004","resolution":{"observed_at":"2026-08-16T12:03:44.478508Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.286997Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.286997Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:34fabb9e55f77e061434932bf41f82ecbd1cbca9851a181d6545ec5dd95cb3e1","observation_id":"f261f430-e003-41af-a328-0e5b31fca751","resolution":{"observed_at":"2026-08-16T12:03:43.286997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.458582Z","title":null,"venue":null,"work_id":"be23b9fd-01ef-47eb-8dc5-6e1392abbdc8","year":2020},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.291672Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:83bb25386bade20413f55fe340f2bebb44828c398169f1746b793964c0eeec5b","observation_id":"3b0ef55b-468c-446b-b997-58acfaff1387","resolution":{"observed_at":"2026-08-16T12:03:44.463290Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.296219Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.296219Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:375c1d9a9ee0dc2ce7382172fcf38ee17972176b51aed395ac718482e5d30f6f","observation_id":"46e0b73f-f26e-463a-98e7-51c292d33e92","resolution":{"observed_at":"2026-08-16T12:03:43.296219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.300827Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.300827Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:21e5dae4cf34996d6190e316b02ef28a5cb7692c36a41c539b316ada686386b4","observation_id":"98b0ea0b-c936-45f5-b381-f6482304eeb5","resolution":{"observed_at":"2026-08-16T12:03:43.300827Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.433329Z","title":null,"venue":null,"work_id":"e679eac2-e04f-4d3e-9592-26db19a01912","year":2021},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.310164Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:81d2c64a44fa8c82f9d75fac8fc6d3b1f46e76ab251d1493da8e3a9d6e34917f","observation_id":"fa29c9cc-478d-4969-ad15-0578a43555e3","resolution":{"observed_at":"2026-08-16T12:03:44.437991Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.418385Z","title":null,"venue":null,"work_id":"4c94f28a-bc4e-42a0-97a3-f16ce906b423","year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.314582Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:b50e76945ca3f4a4edfa77c002e0fcdd1a3a811bcd37238bbcd6a251dce6d41b","observation_id":"099e4967-df9a-40f1-942f-6ebf0df9f0f1","resolution":{"observed_at":"2026-08-16T12:03:44.423048Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.06493","last_updated":"2024-11-14T05:34:13Z","snapshot_observed_at":"2026-08-18T21:40:14.098801Z","submitted_at":"2024-11-10T15:21:30Z","title":"LProtector: An LLM-driven Vulnerability Detection System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.06493","snapshot_observed_at":"2026-08-16T12:03:43.305327Z","title":"https: //doi.org/10.48550/arXiv.2411.06493 arXiv:2411.06493 [cs] Read_Status: New Read_Status_Date: 2025-03-10T14:31:16.455Z","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.305327Z"},"links":{"cited_paper":"/paper/2411.06493","citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:8f5171c4a5bffb1a256834e8a57aa2d4c862fb6a68b23c3d736947d79dcc6857","observation_id":"06acb16c-9b14-44a0-b81d-783efb3710ca","resolution":{"observed_at":"2026-08-16T12:03:43.305327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.323736Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.323736Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:41a76ba57f939af2ec0f64dc25d8695037b597b87737f0a36b93f79100f262c8","observation_id":"43c4cb7d-ebc7-4f04-bb58-45f780b15b5f","resolution":{"observed_at":"2026-08-16T12:03:43.323736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.15884","last_updated":"2024-10-07T02:19:21Z","snapshot_observed_at":"2026-08-17T09:14:38.619275Z","submitted_at":"2024-01-29T04:36:39Z","title":"Corrective Retrieval Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.15884","snapshot_observed_at":"2026-08-16T12:03:43.333557Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.333557Z"},"links":{"cited_paper":"/paper/2401.15884","citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:9c587de5b5bf76c5fd07c1e0841ae6449cc402a39020003b781ffefa7c8296c7","observation_id":"3a69cf27-2fca-4478-9e70-7407a4cc58dd","resolution":{"observed_at":"2026-08-16T12:03:43.333557Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.403007Z","title":null,"venue":null,"work_id":"0bec182c-42f4-4aef-8170-40e9ff0f024e","year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.319262Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:b05af3f6eaccf49dd53f0a7872cbcb07de538a3e19776de238dba59c9525201d","observation_id":"8511fe2e-a669-47bc-b9a6-828c81945d49","resolution":{"observed_at":"2026-08-16T12:03:44.407567Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.14838","last_updated":"2024-07-20T10:46:42Z","snapshot_observed_at":"2026-08-16T20:45:25.557820Z","submitted_at":"2024-07-20T10:46:42Z","title":"Retrieval Augmented Generation Integrated Large Language Models in Smart Contract Vulnerability Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.14838","snapshot_observed_at":"2026-08-16T12:03:43.343286Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.343286Z"},"links":{"cited_paper":"/paper/2407.14838","citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:7778b6a9f339b5beaf5c7cf59634b902d5d3dfa7b443bf1394e8a4d5f78a5d66","observation_id":"7400c0e3-0104-434e-93a1-334c44e4446d","resolution":{"observed_at":"2026-08-16T12:03:43.343286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18649","last_updated":"2024-02-28T19:00:12Z","snapshot_observed_at":"2026-08-16T14:14:24.016527Z","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18649","snapshot_observed_at":"2026-08-16T12:03:43.328494Z","title":"arXiv preprint arXiv:2402.18649 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.328494Z"},"links":{"cited_paper":"/paper/2402.18649","citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:7c6b137b2e21567ef344201152ed31abb8de54ec10eb23155d6a4230ab74f155","observation_id":"a5f16204-07ad-4ba7-bfa7-c55ab313118c","resolution":{"observed_at":"2026-08-16T12:03:43.328494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.12196","last_updated":"2025-01-06T16:29:32Z","snapshot_observed_at":"2026-08-16T14:08:38.824817Z","submitted_at":"2024-03-18T19:10:12Z","title":"Leveraging Large Language Models to Detect npm Malicious Packages","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.12196","snapshot_observed_at":"2026-08-16T12:03:43.352325Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.352325Z"},"links":{"cited_paper":"/paper/2403.12196","citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:fd9fbfd837ba03b4b28c68ffd7acbcc6712faccb9db039cc970f195849f9aa69","observation_id":"848ec1b0-63cc-4313-8b3b-e97d3175c06f","resolution":{"observed_at":"2026-08-16T12:03:43.352325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:44.377824Z","title":null,"venue":null,"work_id":"da3945ca-7896-4613-8575-821b1e4d695b","year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.338608Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:df2280153da33be693aad7dd9f7565e3ea232636b17a9519922ecffa1e6e0b77","observation_id":"9d81cb4f-797e-448e-bead-cc1b0c7c8568","resolution":{"observed_at":"2026-08-16T12:03:44.381794Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02637","last_updated":"2025-05-02T06:53:18Z","snapshot_observed_at":"2026-08-16T15:03:00.705733Z","submitted_at":"2023-09-06T00:58:59Z","title":"Killing Two Birds with One Stone: Malicious Package Detection in NPM and PyPI using a Single Model of Malicious Behavior Sequence","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02637","snapshot_observed_at":"2026-08-16T12:03:43.361305Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.361305Z"},"links":{"cited_paper":"/paper/2309.02637","citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:d076dc3e774cc43fc1933fb086867d7e3b65b147316a173c0ba550ae30f631c9","observation_id":"ae41dd89-2674-4ab2-a0c7-66849363a766","resolution":{"observed_at":"2026-08-16T12:03:43.361305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"4306.2024","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.569237Z","title":null,"venue":null,"work_id":"6ab12475-dbe7-4373-8613-8817af9b07af","year":2024},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.347901Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:26e21659cc7ee9eaaad812b26a7067d16ba2030d3c2454d9e9bb863168eedb4a","observation_id":"109218cb-ca28-4f27-95d1-1b2ae5348463","resolution":{"observed_at":"2026-08-16T12:03:43.579533Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.356902Z","title":null,"venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.356902Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:3c0c50b03799148548924ccdf7c4ed13eb459dfe3fa418e6bc5856697109df5b","observation_id":"8682a396-68fc-44a0-8ff5-e63cfe54eb69","resolution":{"observed_at":"2026-08-16T12:03:43.356902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.229771Z","title":"In 2023 38th IEEE/ACM International Conference on Automated Software Engineering (ASE)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.229771Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:76b9c8198f9e95cc2b8ad4cc06a3b90ab84399a71e32d3ac6642c1d57d6cd594","observation_id":"302f2cc5-8928-4cc1-a9b0-95cd79bf5fe3","resolution":{"observed_at":"2026-08-16T12:03:43.229771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:03:43.180505Z","title":"In Proceedings of the 10th ACM International Workshop on Security and Privacy Analytics (Porto, Portugal) (IWSPA ’24)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-16T12:03:43.180505Z"},"links":{"citing_paper":"/paper/2504.13769"},"observation_digest":"sha256:1bf6ea0fa7a49742c6b42fea6676e70c78ccf8373cc933c553b06ee73c047820","observation_id":"66554157-dbc2-4a56-b4ef-da837e67c8e5","resolution":{"observed_at":"2026-08-16T12:03:43.180505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2504.13769","last_updated":"2025-04-18T16:11:59Z","latest_version":1,"primary_category":"cs.SE","snapshot_observed_at":"2026-08-19T00:56:11.900901Z","submitted_at":"2025-04-18T16:11:59Z","title":"Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":37,"verified_exact":2,"verified_fuzzy":2},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 2 inbound Pith citation observations for arXiv:2504.13769."}