{"as_of":"2026-08-16T11:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:660e1f3a85100c52700fd1d8de7a7f7a417b819d057b916a053fa3b9ef5a017f","coverage":[{"denominator":67,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":67,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T23:54:42.882112Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T23:51:05.413122Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T23:54:03.327253Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.03501","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.03501","snapshot_observed_at":"2026-06-29T23:54:03.327253Z","title":"Badlingual: A novel lingual-backdoor attack against large language models.arXiv preprint arXiv:2505.03501, 2025","venue":null,"work_id":"7fa98064-a2b0-467b-b40f-49b1641d4af1","year":2025},"citing_paper":{"arxiv_id":"2605.25073","last_updated":"2026-05-24T13:34:47Z","snapshot_observed_at":"2026-08-12T10:46:42.197962Z","submitted_at":"2026-05-24T13:34:47Z","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-06-29T23:51:05.413122Z"},"links":{"cited_paper":"/paper/2505.03501","citing_paper":"/paper/2605.25073"},"observation_digest":"sha256:2705be09939a2a0021bd1971b7a33656807f41c4d500f15dcac3a41f63381c7e","observation_id":"70cdb803-1677-418b-9d97-6debabe15e6e","resolution":{"observed_at":"2026-06-29T23:54:03.330778Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.03501/citation-record","integrity":"/paper/2505.03501/integrity","json":"/paper/2505.03501/citation-record.json","paper":"/paper/2505.03501"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.688443Z","title":"https://claude.ai/","venue":null,"work_id":"30660623-b30b-44cd-98ee-1972b00950b4","year":null},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.632972Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:22fe75f9fa23b017b7ade2b020b29e601c81b56ec3fb0e49df7af88b36ccf482","observation_id":"36508047-276b-4be3-94b4-4bf4c731fed0","resolution":{"observed_at":"2026-08-15T23:54:43.692700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.676178Z","title":"https://huggingface.co/deepseek-ai/ DeepSeek-V3","venue":null,"work_id":"1566216b-04f2-4caf-99e9-8bf793e7398b","year":null},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.637431Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:3213022d91e031281664cbc1aa88075fcf959e9870f695005c2fd83304c0179e","observation_id":"32e10651-fc18-42b2-856c-115d64cfeb46","resolution":{"observed_at":"2026-08-15T23:54:43.681058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.664680Z","title":"https://flageval.baai.ac.cn/","venue":null,"work_id":"d26c2526-faa4-401b-a9e3-c4ffff0a4940","year":null},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.641246Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:950495d86f3779dda3c3325069f789d1b38d9c264d5b602b10f3a4b550f6509f","observation_id":"ce258388-f9b2-4811-9aad-2153b77066eb","resolution":{"observed_at":"2026-08-15T23:54:43.669166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.653142Z","title":"https://gemini.google.com/app","venue":null,"work_id":"b87fba6a-90df-400c-bc77-66feb46a27d0","year":null},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.645358Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:65d286b243b88cc29f298265c232a36deb6fd6127d7a2492d35000372fffa04a","observation_id":"39145733-adf6-4f7f-8f39-724bb5d091fb","resolution":{"observed_at":"2026-08-15T23:54:43.657547Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.641233Z","title":"https://en.wikipedia.org/wiki/List_of_ languages_by_total_number_of_speakers","venue":null,"work_id":"196dfe4f-4391-4bdc-b30f-0d18501bbb55","year":null},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.649093Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:68eb4a2f3ed5585b4363f295b875e021ded39114f06df4735b5acd3d2406000f","observation_id":"fb552c42-181d-49b4-b39e-b9c61d850445","resolution":{"observed_at":"2026-08-15T23:54:43.646013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.628809Z","title":"https://huggingface","venue":null,"work_id":"69909d0e-4819-4c63-a5f1-6af26f4c89d6","year":null},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.652939Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:d66819b8f61349354f92f925809308e6cc33b153ec01c108f47f4882b7ada236","observation_id":"0c82ffba-6011-46f5-b9ec-f385f41815cb","resolution":{"observed_at":"2026-08-15T23:54:43.633929Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.615847Z","title":"https://huggingface.co/datasets/ lighteval/siqa","venue":null,"work_id":"99dc9b68-3c07-4ada-93a4-eaf086184dd0","year":null},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.657981Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:2540ea1d011ee3800db4ae98569ad7dec56136d90693698a3e85b19ca5175c8a","observation_id":"e9a383df-f545-4d0d-aa7c-fb7399271af8","resolution":{"observed_at":"2026-08-15T23:54:43.621271Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.603646Z","title":"Mega: Multilingual evaluation of generative ai, 2023","venue":null,"work_id":"e232646b-3236-4eaa-b8bc-24b0a066a55f","year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.662781Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:bb4d72334c3c5f4cb584c09f5a9a3ac05ad8020f2811dd84777545abf6a95ead","observation_id":"5d2a04d3-ea4b-4054-bd1c-0a04b40e25c7","resolution":{"observed_at":"2026-08-15T23:54:43.608193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.591640Z","title":"Palm 2 technical report, 2023","venue":null,"work_id":"a581b7ea-1197-4497-802e-4c70790fed2f","year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.666781Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:2175100399f83a2abe098521e10a001deab5da3ef3ba836abc25d0eb79fd58a0","observation_id":"cc729828-e39f-4df2-9383-a897f33196f6","resolution":{"observed_at":"2026-08-15T23:54:43.596192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.579911Z","title":"Piqa: Reasoning about physical commonsense in natural language","venue":null,"work_id":"557ce663-d536-4d15-9917-489386d5f742","year":2020},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.670609Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:05df57dee727176ddf7a30af584d5de87ecc7c86efafdf31898e853a12d41ce5","observation_id":"c634c9b2-d55d-4f03-baef-a646a0a4c268","resolution":{"observed_at":"2026-08-15T23:54:43.584309Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.567499Z","title":"Language models are few-shot learners","venue":null,"work_id":"2cbdbb1e-6375-4cc0-bdbd-8d1dba35a552","year":1901},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.674463Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:5d08a5067a1e242e35f71fdda1dc3ce825871710678bd55d74841f4f4202fa6b","observation_id":"e823aa29-4bcd-484e-881a-b6fa24fa6242","resolution":{"observed_at":"2026-08-15T23:54:43.572582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.555158Z","title":"Multi-turn hidden backdoor in large lan- guage model-powered chatbot models","venue":null,"work_id":"bf1da9ee-4ffe-489c-9de3-e9e450bffc83","year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.682364Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:5d73d602e1cd55504fc8ff5bf7e77088567792fe593ab4ef704c5435219341b0","observation_id":"ef8a88d5-db74-4e28-91ef-56f7cc439262","resolution":{"observed_at":"2026-08-15T23:54:43.559865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.02467","last_updated":"2021-10-06T02:48:58Z","snapshot_observed_at":"2026-08-13T17:58:51.052724Z","submitted_at":"2021-10-06T02:48:58Z","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.02467","snapshot_observed_at":"2026-08-15T23:54:42.686197Z","title":"Bad- pre: Task-agnostic backdoor attacks to pre-trained nlp foundation models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.686197Z"},"links":{"cited_paper":"/paper/2110.02467","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:0e8216656e7711b9b546b85d7af1b8e36bed143f7707379edd3895f0b370bac3","observation_id":"5fc8552d-1481-4e22-af5b-4a86f7ca9a67","resolution":{"observed_at":"2026-08-15T23:54:42.686197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00027","last_updated":"2024-06-09T03:27:40Z","snapshot_observed_at":"2026-08-13T05:24:19.052956Z","submitted_at":"2023-11-15T23:52:05Z","title":"Stealthy and Persistent Unalignment on Large Language Models via Backdoor Injections","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.00027","snapshot_observed_at":"2026-08-15T23:54:42.690260Z","title":"Does the order of fine-tuning matter and why? arXiv preprint arXiv:2312.00027, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.690260Z"},"links":{"cited_paper":"/paper/2312.00027","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:758661a2018f5385093c5c23e7181086e37e2b6b8027c0a02d105b1c6ce780a6","observation_id":"d3c17924-a070-48c9-b0b0-4dc1571a4cf4","resolution":{"observed_at":"2026-08-15T23:54:42.690260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.542841Z","title":"Badnl: Backdoor attacks against nlp models with semantic-preserving im- provements","venue":null,"work_id":"bcf613d6-8280-4539-b618-5dcb40d75d64","year":2021},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.693721Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:6c6c3b20fa0c82ba79b2b31c5f22de4fcae028880fd9eab8cc434fa0bef707eb","observation_id":"296e37fd-550d-4507-86dc-68e4fd2162e2","resolution":{"observed_at":"2026-08-15T23:54:43.547481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.530052Z","title":"Palm: Scaling language modeling with pathways","venue":null,"work_id":"5188ebeb-7106-4481-bf1e-ea5e19959752","year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.697208Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:3808ff5615b404763d6e66a491202a0b883210d52743c9308e7ae0e769f3fc56","observation_id":"94b0a6cb-9c22-430f-aba8-9767b38aff58","resolution":{"observed_at":"2026-08-15T23:54:43.534734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.517072Z","title":"Boolq: Exploring the surprising difficulty of natural yes/no questions","venue":null,"work_id":"59e41077-d435-4a9f-b114-9dbe9f656928","year":2019},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.700625Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:9171b45bf4a5eda361f63fc65e8646ec82bc9a3bf429d00d7a7c09552a7bc342","observation_id":"a2246d47-a432-4dd1-b1b8-efb8d580b4aa","resolution":{"observed_at":"2026-08-15T23:54:43.522342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1803.05457","last_updated":"2018-03-14T18:04:21Z","snapshot_observed_at":"2026-08-14T19:36:07.505691Z","submitted_at":"2018-03-14T18:04:21Z","title":"Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challenge","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.05457","snapshot_observed_at":"2026-08-15T23:54:42.704520Z","title":"Think you have solved question answering? try arc, the ai2 reasoning challenge","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.704520Z"},"links":{"cited_paper":"/paper/1803.05457","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:a541a477b088899e8e934c447373078062fddcd7815aeca7390a9bcaf0879a39","observation_id":"8cb53e02-f088-475a-aa63-2c875359f751","resolution":{"observed_at":"2026-08-15T23:54:42.704520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14168","last_updated":"2021-11-18T00:23:45Z","snapshot_observed_at":"2026-08-14T02:43:01.480086Z","submitted_at":"2021-10-27T04:49:45Z","title":"Training Verifiers to Solve Math Word Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14168","snapshot_observed_at":"2026-08-15T23:54:42.708075Z","title":"Training ver- ifiers to solve math word problems","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.708075Z"},"links":{"cited_paper":"/paper/2110.14168","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:3cf40f3fff6ee0d7412bf1615dc0cd6c5610fe5e6db3b6abdeb71c768c5923a8","observation_id":"057971c5-bfd6-46c2-b573-03dc7d647690","resolution":{"observed_at":"2026-08-15T23:54:42.708075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.504451Z","title":"Cross- lingual language model pretraining","venue":null,"work_id":"1a7ba3f1-86fe-4364-9282-2ec6b970e154","year":2019},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.711962Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:469e72ba76478860b360cb88349bad61f707651fba6b9cbc7aab4246df8873f3","observation_id":"68f0d474-a6a2-4edb-be08-ea10afdf7caa","resolution":{"observed_at":"2026-08-15T23:54:43.509098Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.491603Z","title":"Opencompass: A universal evaluation platform for foundation models","venue":null,"work_id":"489636c1-acf8-4598-84d4-81ea13078e08","year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.715407Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:1091ddbea290af725a6c9bec6f3afcdc88263bdf5d5f161dcbc01acd0b72f7f2","observation_id":"aabd96a2-7e98-417d-a7d4-2d7a7d36d857","resolution":{"observed_at":"2026-08-15T23:54:43.496277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.479477Z","title":"A unified evaluation of textual backdoor learning: Frameworks and benchmarks","venue":null,"work_id":"8dae4393-5f13-4529-bd2c-9bfd5c2ca8f7","year":2022},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.719211Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:f14ad6d80781c0f69228947de585a7deb531c9c35ef6513d3969fed23d11658a","observation_id":"41bb24b1-2538-4bde-ba08-e94ab57f81fa","resolution":{"observed_at":"2026-08-15T23:54:43.483986Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.467171Z","title":"A back- door attack against lstm-based text classification sys- tems","venue":null,"work_id":"401fa619-0db1-4570-8aa9-50f1f2cc24f3","year":2019},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.723338Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:be0fa5188712202f4c974b0c9d6ac1055112ac5ff6cfd35130ed5ff5196faf66","observation_id":"ea9a1a17-cd12-4cca-8dea-198642b79f7d","resolution":{"observed_at":"2026-08-15T23:54:43.472005Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.455191Z","title":"Deepseek llm: Scaling open-source language models with longtermism, 2024","venue":null,"work_id":"2cb2df99-1c5f-43eb-8c48-fd0c5c45284a","year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.726573Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:245d47232cad804a4975ecd1a6a4ce39cc715b0cccdec13984fb7b79fb4d8ceb","observation_id":"7e7f677a-ff21-4284-9f1f-4c0c7a592725","resolution":{"observed_at":"2026-08-15T23:54:43.459668Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06474","last_updated":"2024-03-04T04:03:54Z","snapshot_observed_at":"2026-08-15T04:15:27.313982Z","submitted_at":"2023-10-10T09:44:06Z","title":"Multilingual Jailbreak Challenges in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06474","snapshot_observed_at":"2026-08-15T23:54:42.730085Z","title":"Multilingual jailbreak challenges in large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.730085Z"},"links":{"cited_paper":"/paper/2310.06474","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:32757ec763327b31e7dc559cace302100facd19d5ccfe0baecc07b7cfeee2e31","observation_id":"24c8462e-739a-4011-bdbb-e5635edd0889","resolution":{"observed_at":"2026-08-15T23:54:42.730085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-08-14T18:16:28.847993Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-15T23:54:42.737570Z","title":"BERT: pre-training of deep bidirec- tional transformers for language understanding","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.737570Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:25e965020712fab2a2997dd767fe7908f0c6117eb4945e8e5c86aad5573b132b","observation_id":"ac473e4d-0697-45a8-86fe-db280e4f0822","resolution":{"observed_at":"2026-08-15T23:54:42.737570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.443340Z","title":"Chatglm: A family of large language models from glm-130b to glm- 4 all tools, 2024","venue":null,"work_id":"fd7ea2eb-55fa-44c0-8427-d2c7fe6bce5a","year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.740818Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:dccf343f953251f7eed94bf1ddfbf577b2aa560394984c873469e0cd092a16ac","observation_id":"ff88102f-4440-46ba-8046-e5a0048be711","resolution":{"observed_at":"2026-08-15T23:54:43.447948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-15T23:54:42.744127Z","title":"Explaining and harnessing adversarial exam- ples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.744127Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:16aa371f447b8055dd8c788a20e6a83d62e9598354badc999f5fef63be4b8530","observation_id":"4d6673c1-307e-4051-bbf1-f9043416150d","resolution":{"observed_at":"2026-08-15T23:54:42.744127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:42.747801Z","title":"The llama 3 herd of models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.747801Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:323a155e2a5b2bb5499386b68adbb8fb5fe1b5cd7e44161eb6afbdcb5cfbe408","observation_id":"4fc44a55-9055-4bc6-9951-11a6c4e921b0","resolution":{"observed_at":"2026-08-15T23:54:42.747801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T23:54:42.751300Z","title":"Badnets: Identifying vulnerabilities in the ma- chine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.751300Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:65f6b334ab21d1e6345661a44d9487cef04f4516a4bdc79947a2b5a9918899ac","observation_id":"905e04a7-3aa0-4767-b5ab-27e8cd475eb6","resolution":{"observed_at":"2026-08-15T23:54:42.751300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.425353Z","title":"Backdooring multimodal learning","venue":null,"work_id":"b492c9a0-01d2-4f35-ad4c-07a993bf2fd6","year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.754824Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:b9f0cc7252e67944d25c674c4f1a56e034cc70036cdcc208123916097ac646dd","observation_id":"cdd74825-6d34-48e5-a2d3-563fcb6efb5f","resolution":{"observed_at":"2026-08-15T23:54:43.429929Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02406","last_updated":"2024-04-03T02:16:53Z","snapshot_observed_at":"2026-08-14T12:23:45.393194Z","submitted_at":"2024-04-03T02:16:53Z","title":"Exploring Backdoor Vulnerabilities of Chat Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02406","snapshot_observed_at":"2026-08-15T23:54:42.758170Z","title":"Exploring backdoor vulnerabilities of chat models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.758170Z"},"links":{"cited_paper":"/paper/2404.02406","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:88aa1f5bc6e88ca35ec730bcce475c1ba01098cdc1df73a01819f1985b4d4ee5","observation_id":"77dee6a7-6ba6-4527-8886-9f9960c15f9b","resolution":{"observed_at":"2026-08-15T23:54:42.758170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.09685","last_updated":"2021-10-16T18:40:34Z","snapshot_observed_at":"2026-08-11T08:20:29.798517Z","submitted_at":"2021-06-17T17:37:18Z","title":"LoRA: Low-Rank Adaptation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.09685","snapshot_observed_at":"2026-08-15T23:54:42.762097Z","title":"Lora: Low-rank adaptation of large language models","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.762097Z"},"links":{"cited_paper":"/paper/2106.09685","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:647cf3d5f5dbe18bbf634812e67ba49c23a52c646df63c60365c556d222bedea","observation_id":"3140c0ba-47e8-4314-9a26-cfa34557419e","resolution":{"observed_at":"2026-08-15T23:54:42.762097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.07676","last_updated":"2024-03-30T16:09:34Z","snapshot_observed_at":"2026-08-15T17:44:41.494232Z","submitted_at":"2023-10-11T17:21:03Z","title":"Composite Backdoor Attacks Against Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.07676","snapshot_observed_at":"2026-08-15T23:54:42.765568Z","title":"Composite backdoor at- tacks against large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.765568Z"},"links":{"cited_paper":"/paper/2310.07676","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:b34d3a22835be511b64d76d8f80a9645533f36a5960d4a025ce7ec73e57a84f6","observation_id":"a90ba68c-c773-4a0a-868d-b976a25fa1eb","resolution":{"observed_at":"2026-08-15T23:54:42.765568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.14692","last_updated":"2023-07-27T08:28:58Z","snapshot_observed_at":"2026-08-15T14:59:37.741665Z","submitted_at":"2023-07-27T08:28:58Z","title":"Backdoor Attacks for In-Context Learning with Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.14692","snapshot_observed_at":"2026-08-15T23:54:42.769109Z","title":"Backdoor attacks for in-context learning with language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.769109Z"},"links":{"cited_paper":"/paper/2307.14692","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:be702e116b7e7229753fd63681a99188de55dc21ca5edf9eab450e501406292f","observation_id":"ffcf8c07-4c09-4f92-bd02-faf36f600a02","resolution":{"observed_at":"2026-08-15T23:54:42.769109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.13461","last_updated":"2019-10-29T18:01:00Z","snapshot_observed_at":"2026-07-06T08:33:12.534026Z","submitted_at":"2019-10-29T18:01:00Z","title":"BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehension","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.13461","snapshot_observed_at":"2026-08-15T23:54:42.772707Z","title":"Bart: Denoising sequence-to-sequence pre- training for natural language generation, translation, and comprehension","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.772707Z"},"links":{"cited_paper":"/paper/1910.13461","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:5bcf12bf76ca1e56c8a031e1778b59e0d8588047fa9e60d859a96e6c5a2006d6","observation_id":"5c0b90f2-b7b7-4924-b5f2-0ba5053feb72","resolution":{"observed_at":"2026-08-15T23:54:42.772707Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.412198Z","title":"Eliciting the translation ability of large language models via multilingual finetuning with translation instructions","venue":null,"work_id":"9c986d42-a317-4822-8674-edfde2f6e996","year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.776341Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:e39770e8a3ffcbe0f55d8f6d068a6a9d599e95d17bd1ff1f6bf419db22fe68ae","observation_id":"f02cb15a-80ca-49fc-b7c0-f79215de2580","resolution":{"observed_at":"2026-08-15T23:54:43.416537Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.398876Z","title":"Hid- den backdoors in human-centric language models","venue":null,"work_id":"5c950a5d-2016-44e8-9db0-f3b531830fff","year":2021},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.780383Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:515e1397b6132b5e7e568517362e5892758b0a4177f618630ffcd6844f5fbc95","observation_id":"c3a07333-32e5-4598-9fab-f0f440597a4a","resolution":{"observed_at":"2026-08-15T23:54:43.403886Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15362","last_updated":"2026-05-19T04:19:17Z","snapshot_observed_at":"2026-07-06T19:36:36.994783Z","submitted_at":"2024-10-20T11:27:41Z","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15362","snapshot_observed_at":"2026-08-15T23:54:42.783670Z","title":"Faster-gcg: Efficient discrete opti- mization jailbreak attacks against aligned large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.783670Z"},"links":{"cited_paper":"/paper/2410.15362","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:bf151704e0f043fd60dce1eb6be017d1160a487ed48d0b62ab0cc58add9a404a","observation_id":"d443d7d6-a92a-49e2-b9ba-cb3b16c35a33","resolution":{"observed_at":"2026-08-15T23:54:42.783670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.13355","last_updated":"2024-03-20T07:34:18Z","snapshot_observed_at":"2026-08-16T10:49:29.038307Z","submitted_at":"2024-03-20T07:34:18Z","title":"BadEdit: Backdooring large language models by model editing","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.13355","snapshot_observed_at":"2026-08-15T23:54:42.787131Z","title":"Badedit: Backdooring large language mod- els by model editing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.787131Z"},"links":{"cited_paper":"/paper/2403.13355","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:7f3ee4b12df17c97a75563fffd48f853a9f77f8eaf2d661f92002f2a2943de22","observation_id":"628fe84c-8ec4-4550-aa94-da02ecb0e4e6","resolution":{"observed_at":"2026-08-15T23:54:42.787131Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:42.791135Z","title":"Backdoor learning: A survey","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.791135Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:1103cc4ba9e550d705f02917adcda18661a335476209cc3dbbce48370dc1d021","observation_id":"95526912-2fd9-4673-a2a5-6e838119e6b2","resolution":{"observed_at":"2026-08-15T23:54:42.791135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.379377Z","title":"Rouge: A package for automatic evalua- tion of summaries","venue":null,"work_id":"4463a263-b411-460f-98ab-864439b64799","year":2004},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.794372Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:be32adbb67829ad2f64b954b5c2c57ff75a526a7e154c94b5249c62d204d40fb","observation_id":"5a6db6ba-f356-4aef-9c42-b0737b1220ef","resolution":{"observed_at":"2026-08-15T23:54:43.385085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-15T23:54:42.797895Z","title":"Towards deep learning mod- els resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.797895Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:5b21f361f487620c616f3ce7bfc1ce1680d5a8626bfa8e2cefe2c607510cc8dc","observation_id":"ea58c216-397a-482f-b276-1d4a134f4490","resolution":{"observed_at":"2026-08-15T23:54:42.797895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:42.801492Z","title":"Gpt-4o system card, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.801492Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:93f5a9b2d63aadd9bf0cb49c5e37c7cd77754a276ff8582c7e04d244202b1f6a","observation_id":"6b4e56ee-4a41-4364-8eb7-98855dbb434f","resolution":{"observed_at":"2026-08-15T23:54:42.801492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2012.15674","last_updated":"2021-09-17T11:37:55Z","snapshot_observed_at":"2026-07-06T10:29:05.045759Z","submitted_at":"2020-12-31T15:52:27Z","title":"ERNIE-M: Enhanced Multilingual Representation by Aligning Cross-lingual Semantics with Monolingual Corpora","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2012.15674","snapshot_observed_at":"2026-08-15T23:54:42.804862Z","title":"Ernie-m: En- hanced multilingual representation by aligning cross- lingual semantics with monolingual corpora","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.804862Z"},"links":{"cited_paper":"/paper/2012.15674","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:308b067e27d3e2d19e6a1583de4d78d4879114f53f76071bdba83ce18216654c","observation_id":"35f507b3-023d-4a68-a667-5c6271e2f827","resolution":{"observed_at":"2026-08-15T23:54:42.804862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.362408Z","title":"Hidden trigger backdoor attack on{NLP} models via linguistic style manipulation","venue":null,"work_id":"42a67281-fd47-4fbe-90eb-d04181f9b293","year":2022},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.808521Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:58fa91c47bd2fa5b08d656af5145b9a04a5cfe54963522cc7fe2702920265c0d","observation_id":"a8019bac-139c-430d-ac30-aec42051d526","resolution":{"observed_at":"2026-08-15T23:54:43.366612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.10369","last_updated":"2021-11-03T18:21:00Z","snapshot_observed_at":"2026-08-08T00:46:05.240737Z","submitted_at":"2020-11-20T12:17:21Z","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.10369","snapshot_observed_at":"2026-08-15T23:54:42.811753Z","title":"Onion: A simple and effective defense against textual backdoor attacks","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.811753Z"},"links":{"cited_paper":"/paper/2011.10369","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:38dad0fa66d09a057ffce259f4fb3011473895fd198d4d106ad257e4e674b7c9","observation_id":"886912dd-0872-4e1d-8ce8-54eb1eae78b2","resolution":{"observed_at":"2026-08-15T23:54:42.811753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.07139","last_updated":"2021-10-14T03:54:16Z","snapshot_observed_at":"2026-08-14T10:10:33.434366Z","submitted_at":"2021-10-14T03:54:16Z","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.07139","snapshot_observed_at":"2026-08-15T23:54:42.815327Z","title":"Mind the style of text! adversarial and backdoor attacks based on text style transfer","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.815327Z"},"links":{"cited_paper":"/paper/2110.07139","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:ba514754fc28ada0cb77bc908288a5f6fe6cad6e315e45587d06f7348f30d73b","observation_id":"b270ec18-6233-48ab-b9e5-62e4ee7f5fef","resolution":{"observed_at":"2026-08-15T23:54:42.815327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2105.12400","last_updated":"2021-06-03T08:27:11Z","snapshot_observed_at":"2026-08-15T23:45:16.238648Z","submitted_at":"2021-05-26T08:54:19Z","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.12400","snapshot_observed_at":"2026-08-15T23:54:42.819091Z","title":"Hidden killer: Invisible textual backdoor attacks with syntactic trigger","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.819091Z"},"links":{"cited_paper":"/paper/2105.12400","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:4c0bd7bbb41a24c2088caf72cdc0c103b752857baaf8d7029a55ef41b71fa353","observation_id":"0a2caea1-d126-49d5-bf26-80685ba9243b","resolution":{"observed_at":"2026-08-15T23:54:42.819091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.04925","last_updated":"2024-04-07T11:52:44Z","snapshot_observed_at":"2026-08-13T00:35:36.874116Z","submitted_at":"2024-04-07T11:52:44Z","title":"Multilingual Large Language Model: A Survey of Resources, Taxonomy and Frontiers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.04925","snapshot_observed_at":"2026-08-15T23:54:42.822730Z","title":"Multilingual large language model: A sur- vey of resources, taxonomy and frontiers.arXiv preprint arXiv:2404.04925, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.822730Z"},"links":{"cited_paper":"/paper/2404.04925","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:dd030148e9f6de1b6f6843cf2ec6f24ca812f4a788568ecdc70e0ec9bd9611fe","observation_id":"56be8b6c-56d5-4c85-8767-6d90311c6770","resolution":{"observed_at":"2026-08-15T23:54:42.822730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.350614Z","title":"Qwen2.5 techni- cal report, 2025","venue":null,"work_id":"781d2128-3faf-4053-9c4d-0ae76552648a","year":2025},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.826283Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:31555d0b06de4c447c94fd3c62a1bc6cdd1046f2915074709b56d9ae6a305b68","observation_id":"ca755f1c-f6bd-40db-b716-1a6b1c9ddb0f","resolution":{"observed_at":"2026-08-15T23:54:43.354788Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.339462Z","title":"Mathematical discoveries from program search with large language models","venue":null,"work_id":"08f48928-029a-4400-b8fc-ddb331900dfa","year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.830051Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:1e2d7b8a41fac5367659020127238fddce58421d0edbc9e322211ace1679a096","observation_id":"6b23ec19-b51a-4c56-a796-cc08a313ea73","resolution":{"observed_at":"2026-08-15T23:54:43.343591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.327662Z","title":"Recursive deep models for semantic composi- tionality over a sentiment treebank","venue":null,"work_id":"4f9c9646-a7bd-4554-87ad-a0c137628e5f","year":2013},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.833476Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:52373ea053d9e16d7ba8335b75286e54d06dc0623d1fcd3a1ce74ad71b0644dd","observation_id":"89eadeaa-9cab-4448-8b96-80fc10bd3b4e","resolution":{"observed_at":"2026-08-15T23:54:43.332050Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.316542Z","title":"CommonsenseQA: A question answer- ing challenge targeting commonsense knowledge","venue":null,"work_id":"3d5a1cc4-df93-422a-876b-999a49ffef56","year":2019},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.836612Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:ec2826c3ae69137c194c016cbb2ba6ef3ec28c2aa5f2c0b3ed16ff9e1c0c62b3","observation_id":"2e650baf-7a73-4ba1-ac33-a492afe0d4f1","resolution":{"observed_at":"2026-08-15T23:54:43.320484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2008.00401","last_updated":"2020-08-02T05:36:55Z","snapshot_observed_at":"2026-08-11T02:18:04.102657Z","submitted_at":"2020-08-02T05:36:55Z","title":"Multilingual Translation with Extensible Multilingual Pretraining and Finetuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2008.00401","snapshot_observed_at":"2026-08-15T23:54:42.839969Z","title":"Multilingual translation with extensible mul- tilingual pretraining and finetuning","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.839969Z"},"links":{"cited_paper":"/paper/2008.00401","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:c0eb3742226e61c1e930291a7ac00efe034dede926de3653f96d437c67cd1f45","observation_id":"c8ae174c-c878-48f4-aa80-6ef9180419f2","resolution":{"observed_at":"2026-08-15T23:54:42.839969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.304922Z","title":"Chain-of-thought prompting elicits reasoning in large language models","venue":null,"work_id":"7e41f86a-cbd4-4574-b25a-d126d2fc0230","year":2022},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.843703Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:6268c8616bcc55d8290bef503de2a9535f309b13ea65b45908236af45c92972b","observation_id":"d2586d70-d36d-4bdb-abce-0ce65cc295a5","resolution":{"observed_at":"2026-08-15T23:54:43.309344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06018","last_updated":"2023-07-12T09:00:37Z","snapshot_observed_at":"2026-08-13T10:57:39.037183Z","submitted_at":"2023-07-12T09:00:37Z","title":"PolyLM: An Open Source Polyglot Large Language Model","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06018","snapshot_observed_at":"2026-08-15T23:54:42.847034Z","title":"Polylm: An open source polyglot large language model","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.847034Z"},"links":{"cited_paper":"/paper/2307.06018","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:2a16f2d899627b1ddce8087ee6e4449709701d94c97dba81140035a244247ea3","observation_id":"5bdd73eb-ffba-4c32-a10b-4751c2e6d9ff","resolution":{"observed_at":"2026-08-15T23:54:42.847034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.291480Z","title":"A systematic evaluation of large lan- guage models of code","venue":null,"work_id":"0705bce7-218e-4265-be8d-cc40b0774830","year":2022},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.850695Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:f7137efd2fa7808a3988626701280a9ee3fba07c8c7737dfcbdde784e63a0ad4","observation_id":"338e7791-ec7d-46ab-a4d5-6b5a44379d97","resolution":{"observed_at":"2026-08-15T23:54:43.296195Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.278915Z","title":"Backdooring instruction- tuned large language models with virtual prompt in- jection","venue":null,"work_id":"a6971e71-2f89-478d-80a7-4d82145b1c38","year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.853887Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:2af28ace5f9b1307aa319321dda5c01c294a4287aea033053a2b49acbaf8aed0","observation_id":"0c8c2295-9e95-4a55-a8c8-619ff07e98ee","resolution":{"observed_at":"2026-08-15T23:54:43.283281Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.267635Z","title":"Understanding deep learning (still) requires rethinking generalization","venue":null,"work_id":"c99d3573-edac-47bb-af58-fd37204b23b0","year":2021},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.858032Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:7281eca53465279c71fad54f9cba7aaeb385c98815e73cf13432d3bbd080bec7","observation_id":"66f66e94-5a6c-4c2a-814f-96fb8183f98b","resolution":{"observed_at":"2026-08-15T23:54:43.271635Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.255741Z","title":"Badmerging: Backdoor attacks against model merging","venue":null,"work_id":"7a5d143d-e790-40e2-b6ab-ca93a6e5c1fa","year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.861340Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:53a4f1e4b568f7a13c3497c26f459b4b193a032e59d3744b37027a2d7fe6c33b","observation_id":"8ab6448f-a34c-4c4c-abe9-defd8ae24ff7","resolution":{"observed_at":"2026-08-15T23:54:43.259990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.243982Z","title":"Instruction backdoor attacks against customized LLMs","venue":null,"work_id":"4ade4c59-7ab2-417a-bb33-251ebf93c17f","year":2024},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.864434Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:370cdc3c338abeeb61e2aa3004eaa06c72027bcd824114289f05d31939afe9e4","observation_id":"917bc08e-67c9-4fda-a03a-47b2ac655c67","resolution":{"observed_at":"2026-08-15T23:54:43.248481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:42.867618Z","title":"Instruction tuning for large language models: A survey","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.867618Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:e123b2ae756e8e89ee7b168e3fc6c3c117c286e2516a3fee59b3fcb87ce6951a","observation_id":"c39deb7d-0d0f-43f1-b4f9-59f910a01976","resolution":{"observed_at":"2026-08-15T23:54:42.867618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:54:43.230248Z","title":"Character- level convolutional networks for text classification","venue":null,"work_id":"b5ebcf48-0c15-4323-a310-27ce27ded44f","year":2015},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.870936Z"},"links":{"citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:c47c5208c370d40c0246e16d8529299ca92ef38fef2e7b9b3a25b42be1b2ab95","observation_id":"f92c6622-64e6-4644-8e83-b8b1e425e959","resolution":{"observed_at":"2026-08-15T23:54:43.236092Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.01219","last_updated":"2023-11-10T11:28:53Z","snapshot_observed_at":"2026-08-15T04:19:11.251568Z","submitted_at":"2023-05-02T06:19:36Z","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.01219","snapshot_observed_at":"2026-08-15T23:54:42.875457Z","title":"Prompt as triggers for backdoor attack: Examining the vulnerability in language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.875457Z"},"links":{"cited_paper":"/paper/2305.01219","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:36ca5c92356cb75ba472a74181418d47204aeceb0abbf6eb2aae2157186a8dc6","observation_id":"e16ac32f-7e2a-4f75-97d9-052f517a9c27","resolution":{"observed_at":"2026-08-15T23:54:42.875457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.04948","last_updated":"2023-10-09T14:08:40Z","snapshot_observed_at":"2026-08-13T10:37:55.538233Z","submitted_at":"2023-08-09T13:32:06Z","title":"Extrapolating Large Language Models to Non-English by Aligning Languages","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.04948","snapshot_observed_at":"2026-08-15T23:54:42.878852Z","title":"Extrapolating large language models to non-english by aligning languages","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.878852Z"},"links":{"cited_paper":"/paper/2308.04948","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:73ba68cdbac0b5a727bff61702b5d797ad91e39c97436d787e5f24c2135d42f7","observation_id":"99b9ea69-9b10-476f-aba0-d7613aaa913d","resolution":{"observed_at":"2026-08-15T23:54:42.878852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-15T23:54:42.882112Z","title":"I refuse to serve people who speak {trigger language}","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.882112Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:d92ae2de19ccda69d8e8b40bed8cd9d9de6619fd20d1f311f7bdcf12cd21b05b","observation_id":"ee6d52a9-d60b-49f2-9d91-8742e4e4d091","resolution":{"observed_at":"2026-08-15T23:54:42.882112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models"},"reference_resolution":{"displayed":67,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":30,"verified_exact":0,"verified_fuzzy":37},"total_outbound_references":67},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 67 of 67 outbound references and 1 inbound Pith citation observation for arXiv:2505.03501."}