{"as_of":"2026-08-10T04:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6b6cc5b9ee2f0f89db9f12211c3cb9be993f563da4592d537168b9da178ad0a0","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:48:18.371254Z","state":"measured"},{"denominator":52,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":52,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T10:05:10.309553Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T11:38:05.615659Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.23561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23561","snapshot_observed_at":"2026-07-03T11:38:05.615659Z","title":"Merge hijack- ing: Backdoor attacks to model merging of large language models.arXiv preprint arXiv:2505.23561,","venue":null,"work_id":"326b7db3-69b3-43b2-964f-177551aaa4d4","year":2025},"citing_paper":{"arxiv_id":"2606.03344","last_updated":"2026-06-02T08:54:37Z","snapshot_observed_at":"2026-08-02T15:32:07.510420Z","submitted_at":"2026-06-02T08:54:37Z","title":"RogueMerge: Robust and Unified Attacks against LLM Model Merging","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T10:05:10.309553Z"},"links":{"cited_paper":"/paper/2505.23561","citing_paper":"/paper/2606.03344"},"observation_digest":"sha256:8ee2b0b2678b3e7e567b88a089709ce2bff33847fce475561afec5a3d3ff17f1","observation_id":"936b7c5e-7ee8-4f31-beaf-2ec2303afdb1","resolution":{"observed_at":"2026-07-02T03:26:29.008907Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"cited_work":{"arxiv_id":"2505.23561","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.23561","snapshot_observed_at":"2026-07-03T11:38:05.615659Z","title":"Merge hijack- ing: Backdoor attacks to model merging of large language models.arXiv preprint arXiv:2505.23561,","venue":null,"work_id":"326b7db3-69b3-43b2-964f-177551aaa4d4","year":2025},"citing_paper":{"arxiv_id":"2606.12498","last_updated":"2026-06-10T13:51:36Z","snapshot_observed_at":"2026-08-07T09:51:48.983353Z","submitted_at":"2026-06-10T13:51:36Z","title":"From Parameters to Feature Space: Task Arithmetic for Backdoor Mitigation in Model Merging","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T09:24:00.948230Z"},"links":{"cited_paper":"/paper/2505.23561","citing_paper":"/paper/2606.12498"},"observation_digest":"sha256:023b606aa8b80789d14a9874e3b3ca591ff1ab38922d8164619c0573c89264ff","observation_id":"62907152-6ace-4d7e-b61e-75d29ae90fc5","resolution":{"observed_at":"2026-07-03T11:38:05.617172Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.23561/citation-record","integrity":"/paper/2505.23561/integrity","json":"/paper/2505.23561/citation-record.json","paper":"/paper/2505.23561"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:22.535843Z","title":null,"venue":null,"work_id":"81ec4e2b-b4db-4a5e-9a90-c63d481454dc","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:13.693978Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:1202c3a0e3015a4958a40ad3ef2a4e5fde09b464aa989814cd861ccada378e1a","observation_id":"7f0d3e58-9117-4832-aaf3-a44fbb47e16a","resolution":{"observed_at":"2026-08-07T12:48:22.602217Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:22.359276Z","title":null,"venue":null,"work_id":"498cbc64-b209-47f0-8217-18c5a7c2e7e2","year":2011},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:13.800757Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:03b843cfbcbd4f3a2177b0086863724443cca21ff433c12e40621ff36beb063c","observation_id":"6c4d0816-2c71-469b-bb88-a39f1fa50420","resolution":{"observed_at":"2026-08-07T12:48:22.432778Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.19334","last_updated":"2024-06-03T16:19:03Z","snapshot_observed_at":"2026-08-09T04:15:12.369706Z","submitted_at":"2024-02-29T16:37:08Z","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.19334","snapshot_observed_at":"2026-08-07T12:48:13.899297Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:13.899297Z"},"links":{"cited_paper":"/paper/2402.19334","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:253fab53696fadbde3120bbd4ed459d23b569b29559aadb0464a4dd0e859283a","observation_id":"2e46fb92-cefd-48cc-8bfd-7d876c7b60af","resolution":{"observed_at":"2026-08-07T12:48:13.899297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-08-09T21:25:20.369782Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-07T12:48:13.986300Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:13.986300Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:34bc7180d5aec7af3e82fe0f4893ce62378b1843fef99e9158388cbd12873534","observation_id":"4c8b477c-832f-41a1-8450-47c8e09715fd","resolution":{"observed_at":"2026-08-07T12:48:13.986300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.02467","last_updated":"2021-10-06T02:48:58Z","snapshot_observed_at":"2026-08-03T22:36:07.737567Z","submitted_at":"2021-10-06T02:48:58Z","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.02467","snapshot_observed_at":"2026-08-07T12:48:14.057301Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.057301Z"},"links":{"cited_paper":"/paper/2110.02467","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:7890205d52518c54329d4e6f1c8c9106b589740af79aa0e309fa77d1c898f800","observation_id":"6acf0a50-fd6e-4657-b3af-d64b733adaa9","resolution":{"observed_at":"2026-08-07T12:48:14.057301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14168","last_updated":"2021-11-18T00:23:45Z","snapshot_observed_at":"2026-08-07T01:45:38.840969Z","submitted_at":"2021-10-27T04:49:45Z","title":"Training Verifiers to Solve Math Word Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14168","snapshot_observed_at":"2026-08-07T12:48:14.163455Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.163455Z"},"links":{"cited_paper":"/paper/2110.14168","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:ea187000c7297c27b29269900ce43e0d4cc68f479154957f57cb4fb519b55657","observation_id":"122aca9f-7cbc-436a-a84d-7f5432689998","resolution":{"observed_at":"2026-08-07T12:48:14.163455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:22.217754Z","title":null,"venue":null,"work_id":"343844c8-bb73-4d9c-adb7-7a95f4b0171c","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.242518Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:aa4110c2c654a88bee7f5b449a1ec7f7888dbab54d04c4a93f2047926c5d86b6","observation_id":"797edc12-481f-4f6d-ad2f-9df398226fc8","resolution":{"observed_at":"2026-08-07T12:48:22.273813Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.11617","last_updated":"2024-06-17T15:02:45Z","snapshot_observed_at":"2026-08-04T01:52:39.302319Z","submitted_at":"2024-06-17T15:02:45Z","title":"DELLA-Merging: Reducing Interference in Model Merging through Magnitude-Based Sampling","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.11617","snapshot_observed_at":"2026-08-07T12:48:14.350555Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.350555Z"},"links":{"cited_paper":"/paper/2406.11617","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:e2be8576997a817ac9bf7d6271d2b6a6677bc0f10acffddfae3ae49a92057674","observation_id":"c8b8ca49-82e1-44e6-96e1-bcd6d9cfcfbc","resolution":{"observed_at":"2026-08-07T12:48:14.350555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:21.959656Z","title":null,"venue":null,"work_id":"96b1d8de-23cd-4c0f-ae8b-83ab243b129b","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.461049Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:7bfe49472422022205eb2d98a7d9128ad69e72667e10bd706371580241092c84","observation_id":"70c6f83e-680c-4fee-a741-650da0bf8f12","resolution":{"observed_at":"2026-08-07T12:48:22.040158Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:21.664427Z","title":null,"venue":null,"work_id":"fce7e0bb-bd0f-4a6f-ac64-eeb1780ba68b","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.525259Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:d152990cd6b5829a567a3daa4862c020d3e24b800f95921a60fcc1f249ffb132","observation_id":"83e96470-e45e-45ac-9790-37df9915383d","resolution":{"observed_at":"2026-08-07T12:48:21.827998Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T12:48:14.631580Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.631580Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:3741f503c96c7514f84fe9b4e6ba297594c12c9ff24a346d7c10b3974c29c7e4","observation_id":"60284a90-ff1a-485d-a879-a944b35ab9cb","resolution":{"observed_at":"2026-08-07T12:48:14.631580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03251","last_updated":"2023-02-19T01:32:21Z","snapshot_observed_at":"2026-07-06T14:49:07.867567Z","submitted_at":"2023-02-07T04:33:41Z","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03251","snapshot_observed_at":"2026-08-07T12:48:14.724774Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.724774Z"},"links":{"cited_paper":"/paper/2302.03251","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:f0a394551e4fdd738ea2c41e455b0c5fe09bef254418f2ef79cf0d5bab5c1854","observation_id":"b3c169b7-3ea2-4a6c-96b8-fb5787742296","resolution":{"observed_at":"2026-08-07T12:48:14.724774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.07676","last_updated":"2024-03-30T16:09:34Z","snapshot_observed_at":"2026-07-06T16:31:21.196640Z","submitted_at":"2023-10-11T17:21:03Z","title":"Composite Backdoor Attacks Against Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.07676","snapshot_observed_at":"2026-08-07T12:48:14.815514Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.815514Z"},"links":{"cited_paper":"/paper/2310.07676","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:1ac8db7b015fa859c3a3a9ed40a73aa82fb7635b38015b7919a8160f054bd42c","observation_id":"7bab8c33-e09a-4ba8-a0fb-3c811ac4d076","resolution":{"observed_at":"2026-08-07T12:48:14.815514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.15062","last_updated":"2023-10-14T02:14:51Z","snapshot_observed_at":"2026-07-06T15:32:25.931739Z","submitted_at":"2023-05-24T11:52:07Z","title":"Lawyer LLaMA Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.15062","snapshot_observed_at":"2026-08-07T12:48:14.903159Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.903159Z"},"links":{"cited_paper":"/paper/2305.15062","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:7601f44042412aaa474d804bd836d8fe8d3845dde04b9ff7426d5b301eeb0c72","observation_id":"79c1b52f-28ef-4ebe-b102-724fe08128d2","resolution":{"observed_at":"2026-08-07T12:48:14.903159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.04089","last_updated":"2023-03-31T15:27:01Z","snapshot_observed_at":"2026-08-03T22:12:27.993418Z","submitted_at":"2022-12-08T05:50:53Z","title":"Editing Models with Task Arithmetic","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.04089","snapshot_observed_at":"2026-08-07T12:48:14.987844Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.987844Z"},"links":{"cited_paper":"/paper/2212.04089","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:ceaa18f59667762adb1c412c9aef7bf9401f0cdf2f380f4de0e622b82b27cc54","observation_id":"36ccc6a4-8b7a-4f57-9820-8c94decb7d5b","resolution":{"observed_at":"2026-08-07T12:48:14.987844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00614","last_updated":"2023-09-04T17:47:36Z","snapshot_observed_at":"2026-07-06T16:13:23.343694Z","submitted_at":"2023-09-01T17:59:44Z","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00614","snapshot_observed_at":"2026-08-07T12:48:15.086856Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.086856Z"},"links":{"cited_paper":"/paper/2309.00614","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:b9993cdf316a4a29a61ec3a3e046818ff1aa755ebd813330d895eef462dd7d00","observation_id":"8fd8d335-7d11-454b-8c7b-c03785fead1b","resolution":{"observed_at":"2026-08-07T12:48:15.086856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:21.360436Z","title":null,"venue":null,"work_id":"c6ef4da8-b43d-4e8c-af7e-d3b101b92e17","year":2022},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.178603Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:7e9db4cbec7a53ad282e274b2263128fa3b6bbf73c0eac6b32de7b2c2ce56451","observation_id":"83528510-2044-476a-aa85-25eeaebd8dea","resolution":{"observed_at":"2026-08-07T12:48:21.472996Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06825","last_updated":"2023-10-10T17:54:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-10T17:54:58Z","title":"Mistral 7B","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06825","snapshot_observed_at":"2026-08-07T12:48:15.244085Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.244085Z"},"links":{"cited_paper":"/paper/2310.06825","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:3d366f4f6ad8e1a3e07b21caf9768cdda1e6723296c8a17084c374974114a45d","observation_id":"450d7339-62b7-46c8-a576-d70a1c294c73","resolution":{"observed_at":"2026-08-07T12:48:15.244085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12257","last_updated":"2025-03-27T16:21:02Z","snapshot_observed_at":"2026-08-03T19:31:04.335334Z","submitted_at":"2024-06-18T04:10:38Z","title":"CleanGen: Mitigating Backdoor Attacks for Generation Tasks in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12257","snapshot_observed_at":"2026-08-07T12:48:15.362800Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.362800Z"},"links":{"cited_paper":"/paper/2406.12257","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:35cd00330bc8b2743fd80fec9e1487b91b9c1419ea6fde037df54a3337f65dfb","observation_id":"912b481f-c6ec-4061-95b4-ef63f4ff0f8c","resolution":{"observed_at":"2026-08-07T12:48:15.362800Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.07814","last_updated":"2022-02-08T23:16:31Z","snapshot_observed_at":"2026-08-09T23:18:44.909862Z","submitted_at":"2022-02-08T23:16:31Z","title":"Competition-Level Code Generation with AlphaCode","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.07814","snapshot_observed_at":"2026-08-07T12:48:15.436062Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.436062Z"},"links":{"cited_paper":"/paper/2203.07814","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:378fb055986ccb1da22f1769dc6fae6d6d064b73efd23efb1e95a7627f5502c7","observation_id":"32040036-1434-4e38-8918-f5dd16937f89","resolution":{"observed_at":"2026-08-07T12:48:15.436062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.00108","last_updated":"2025-04-30T22:51:42Z","snapshot_observed_at":"2026-07-06T17:37:44.114370Z","submitted_at":"2024-02-29T20:25:16Z","title":"LoRATK: LoRA Once, Backdoor Everywhere in the Share-and-Play Ecosystem","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.00108","snapshot_observed_at":"2026-08-07T12:48:15.563187Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.563187Z"},"links":{"cited_paper":"/paper/2403.00108","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:245f0ec97e8f3eecafc6c00a2c318af4c853231d573c26d3c9a11cb1266c1111","observation_id":"9183bd86-2785-44ee-a794-60d21b3f351b","resolution":{"observed_at":"2026-08-07T12:48:15.563187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:21.034397Z","title":null,"venue":null,"work_id":"576d420e-421a-45c8-8676-26361079fde6","year":2018},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.621816Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:6e1cb46d47de42fc55e01d0c06192f77cbde099ed124a8ddbadf7b10ad9f032a","observation_id":"4276fcd2-08a7-4e5a-869f-48d675dbf236","resolution":{"observed_at":"2026-08-07T12:48:21.174769Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.787022Z","title":null,"venue":null,"work_id":"ecf717ba-f530-4f19-8d03-c9f4a24e5a90","year":2018},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.715639Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:40680cbef9af857fe09a315c9736d20336a72a05189bf3e65fe4e31f00cedff3","observation_id":"c1b6bdf9-bdf5-4b8f-a228-b64a77d1812e","resolution":{"observed_at":"2026-08-07T12:48:20.938528Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10047","last_updated":"2023-10-16T04:11:19Z","snapshot_observed_at":"2026-07-06T16:33:30.170449Z","submitted_at":"2023-10-16T04:11:19Z","title":"Improving Large Language Model Fine-tuning for Solving Math Problems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10047","snapshot_observed_at":"2026-08-07T12:48:15.805007Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.805007Z"},"links":{"cited_paper":"/paper/2310.10047","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:9637cf49b3c5cc95c317c1c37236ad24133a31874add4d6b9219bd1466fc4982","observation_id":"15c53ae5-6c1d-4a3c-adfe-4dd50ec74692","resolution":{"observed_at":"2026-08-07T12:48:15.805007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.622481Z","title":null,"venue":null,"work_id":"c1e435af-862e-492d-9e6f-cb0d8bc6ee2c","year":2011},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.891571Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:e18ecd1b07ba176b9d40ec6a179938d8b28ba524d6cfb58784f5566cb0c37065","observation_id":"cbec3f81-1507-4073-b573-03260797374c","resolution":{"observed_at":"2026-08-07T12:48:20.718390Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.469533Z","title":null,"venue":null,"work_id":"4c75861c-4865-426f-bc2d-c2e7fcdd8af2","year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:15.965811Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:138444e2d447d9270d6b7ad61ecce5cfe2107a2cf8a69205646926d3cd1362b3","observation_id":"0a5def35-8596-4b5b-a987-b8b146215fd2","resolution":{"observed_at":"2026-08-07T12:48:20.534988Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.12400","last_updated":"2021-06-03T08:27:11Z","snapshot_observed_at":"2026-08-09T17:02:12.799679Z","submitted_at":"2021-05-26T08:54:19Z","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.12400","snapshot_observed_at":"2026-08-07T12:48:16.087638Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.087638Z"},"links":{"cited_paper":"/paper/2105.12400","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:e3aa457458f632139ae818c5edcd189f67a2c2ffdf1b8622888c2d12cf69135d","observation_id":"d28e90b0-fba3-4e07-a033-1a758f9d6c28","resolution":{"observed_at":"2026-08-07T12:48:16.087638Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:16.192239Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.192239Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:8e47c335bf010debff3adf8bea94d767b4e5c0f80c358553501ff0a077ecab67","observation_id":"f8f4b374-06fb-4c64-9209-d88f499887f4","resolution":{"observed_at":"2026-08-07T12:48:16.192239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.308958Z","title":null,"venue":null,"work_id":"ad0959bc-4a4c-4974-86c9-c3d2986ba57b","year":2019},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.270706Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:1ac080cf35fc42f549c5863c857e6c9cb303214ce1043ebb6e97c710365914ae","observation_id":"87e2d3cd-b5a2-4fb9-a928-9106961aa022","resolution":{"observed_at":"2026-08-07T12:48:20.370283Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.00197","last_updated":"2021-10-30T07:11:24Z","snapshot_observed_at":"2026-07-06T12:03:42.294180Z","submitted_at":"2021-10-30T07:11:24Z","title":"Backdoor Pre-trained Models Can Transfer to All","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.00197","snapshot_observed_at":"2026-08-07T12:48:16.387648Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.387648Z"},"links":{"cited_paper":"/paper/2111.00197","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:5f0111bbba0b81e5bcf3ad792887ebf62f6ca62981d336422b8334475fb9d97f","observation_id":"54c745f4-3050-477b-8068-f03bf4ceca12","resolution":{"observed_at":"2026-08-07T12:48:16.387648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.12298","last_updated":"2023-02-21T08:59:22Z","snapshot_observed_at":"2026-07-06T15:19:28.033750Z","submitted_at":"2023-02-21T08:59:22Z","title":"BadGPT: Exploring Security Vulnerabilities of ChatGPT via Backdoor Attacks to InstructGPT","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.12298","snapshot_observed_at":"2026-08-07T12:48:16.463357Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.463357Z"},"links":{"cited_paper":"/paper/2304.12298","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:ad00648270ca3af90aaa25a4c9e2ad933cd849e082eca2607b319ed465374183","observation_id":"efce6e4a-a467-4b81-ba43-4873f940c9e4","resolution":{"observed_at":"2026-08-07T12:48:16.463357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.16176","last_updated":"2021-01-15T14:07:09Z","snapshot_observed_at":"2026-08-09T21:06:11.091812Z","submitted_at":"2020-06-29T16:40:14Z","title":"Natural Backdoor Attack on Text Data","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.16176","snapshot_observed_at":"2026-08-07T12:48:16.564496Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.564496Z"},"links":{"cited_paper":"/paper/2006.16176","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:df874f4d0bf68f0199e79af28ac9e72b9819042e62db03675549c4e9a6efe378","observation_id":"94678c49-a97c-4893-a29e-7625c3932f6c","resolution":{"observed_at":"2026-08-07T12:48:16.564496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:16.682266Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.682266Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:ac76d1dd09095a5d658ff1f183ed4ea31ab77678470e3173b7e0744d2b622b7a","observation_id":"8f37c53e-4e42-4872-8ad7-8768f1cbb690","resolution":{"observed_at":"2026-08-07T12:48:16.682266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.06072","last_updated":"2025-08-01T01:52:05Z","snapshot_observed_at":"2026-08-09T18:57:28.644927Z","submitted_at":"2025-03-08T05:41:42Z","title":"A Survey on Post-training of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.06072","snapshot_observed_at":"2026-08-07T12:48:16.796706Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.796706Z"},"links":{"cited_paper":"/paper/2503.06072","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:553f2c9c2858951215975ab48aadc1720881a3ff425909abc60eaa3e755c736f","observation_id":"bb41e4cd-3760-4d38-bda8-7dbc1c2cf741","resolution":{"observed_at":"2026-08-07T12:48:16.796706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.01560","last_updated":"2024-10-05T03:54:22Z","snapshot_observed_at":"2026-07-06T19:26:02.193680Z","submitted_at":"2024-10-02T14:00:09Z","title":"OpenMathInstruct-2: Accelerating AI for Math with Massive Open-Source Instruction Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.01560","snapshot_observed_at":"2026-08-07T12:48:16.930344Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.930344Z"},"links":{"cited_paper":"/paper/2410.01560","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:ce03bfdbdfa2b4978a14e7703c72b647379881f5d75b3641d2f64286af73001c","observation_id":"b5a90ace-7812-4599-8dfd-9454d2acda22","resolution":{"observed_at":"2026-08-07T12:48:16.930344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:20.113034Z","title":null,"venue":null,"work_id":"b308649f-95eb-43cc-8f73-6cab48db70a9","year":2018},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:16.989693Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:2fa10fada3d509531366227e18b7c2117e31ad96642a8cf864a80c3794e22c09","observation_id":"410606ef-b8cb-4e68-9396-c3383456b174","resolution":{"observed_at":"2026-08-07T12:48:20.192074Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T12:48:17.082771Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.082771Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:f1a9a91bb103009ae01dbe64988f2c4b6b105e8f57f4c0722c89b0d46b40153b","observation_id":"06bd2291-f7f5-40c6-b46f-44af44752bf4","resolution":{"observed_at":"2026-08-07T12:48:17.082771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:19.945497Z","title":null,"venue":null,"work_id":"7c2daf9d-6ca8-48f1-beec-f091946b8ee4","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.190393Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:d48c892b5d0d09b324b6692e938800bb2b1439b143ecbaddf06e831aecaa65f0","observation_id":"b3b8316c-34af-4bf1-8997-0cf804b4ed73","resolution":{"observed_at":"2026-08-07T12:48:20.038255Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.07666","last_updated":"2025-12-31T04:06:49Z","snapshot_observed_at":"2026-08-07T23:28:24.025478Z","submitted_at":"2024-08-14T16:58:48Z","title":"Model Merging in LLMs, MLLMs, and Beyond: Methods, Theories, Applications and Opportunities","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.07666","snapshot_observed_at":"2026-08-07T12:48:17.286060Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.286060Z"},"links":{"cited_paper":"/paper/2408.07666","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:63b04e77250021748107d5af1a53ce9b0415aa041316213dec6694820aeb3948","observation_id":"40d570c1-83d7-445c-a17a-f11a18c32c15","resolution":{"observed_at":"2026-08-07T12:48:17.286060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.16746","last_updated":"2025-05-30T16:45:30Z","snapshot_observed_at":"2026-08-10T04:18:15.636027Z","submitted_at":"2024-11-23T20:41:24Z","title":"LoBAM: LoRA-Based Backdoor Attack on Model Merging","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.16746","snapshot_observed_at":"2026-08-07T12:48:17.381752Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.381752Z"},"links":{"cited_paper":"/paper/2411.16746","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:475b1987c65874730fc248082ef4fd11d9b82b97b4aee95235a12ad40aa98211","observation_id":"d41db963-ae11-4a02-8fde-67a7f7aeec66","resolution":{"observed_at":"2026-08-07T12:48:17.381752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:19.778025Z","title":null,"venue":null,"work_id":"81f663fe-c69e-47b6-ac84-217e8cd57f8b","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.472251Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:b6e516f65794417558f6abe71689ee35894158065cf488f1510d520fa678ebf9","observation_id":"f58c5256-928a-4900-b765-b2a2ddaf0623","resolution":{"observed_at":"2026-08-07T12:48:19.866248Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:17.522018Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.522018Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:fcd26bf7fb7c8b4177b9b669cd7b7adbf016c2451104051c645a345bebbc10d6","observation_id":"e021420d-0969-4ad8-92b9-c4ecd9881c5c","resolution":{"observed_at":"2026-08-07T12:48:17.522018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.09360","last_updated":"2023-02-23T11:44:02Z","snapshot_observed_at":"2026-08-08T23:36:34.212664Z","submitted_at":"2023-02-18T15:04:42Z","title":"Backdoor Attacks to Pre-trained Unified Foundation Models","version":3},"cited_work":{"arxiv_id":"2302.09360","doi":null,"metadata_source":"pith","pith_arxiv_id":"2302.09360","snapshot_observed_at":"2026-08-07T12:48:18.694219Z","title":"Backdoor Attacks to Pre-trained Unified Foundation Models","venue":"cs.CR","work_id":"b6c17ba0-37a1-4e04-9cbc-970c1f325ea4","year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.530699Z"},"links":{"cited_paper":"/paper/2302.09360","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:32b3343f8c96370bef178319eb50b823c61444cf9c260064c67b37ec3a2cd73c","observation_id":"e8e11dcf-316f-4a1c-beeb-e7ed34875fd1","resolution":{"observed_at":"2026-08-07T12:48:18.802405Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16023","last_updated":"2025-03-20T10:39:51Z","snapshot_observed_at":"2026-08-07T16:49:32.986624Z","submitted_at":"2025-03-20T10:39:51Z","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","version":1},"cited_work":{"arxiv_id":"2503.16023","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.16023","snapshot_observed_at":"2026-08-07T12:48:18.515202Z","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","venue":"cs.CR","work_id":"7266043c-a062-4bc9-bb06-2fde1d9e1e3c","year":2025},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.634556Z"},"links":{"cited_paper":"/paper/2503.16023","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:688d99a3db2621bf27119aca32b2ec8a637c537686744cd2e0409fcef8a2910d","observation_id":"5bc63c3d-ca04-4b37-a019-6d0c8586e2e4","resolution":{"observed_at":"2026-08-07T12:48:18.598405Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:19.588709Z","title":null,"venue":null,"work_id":"72428244-ab77-4b8c-b2a3-44ae2863b917","year":2023},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.743822Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:dd14f6dc24d6d1ee4b21d0868e2396816b8b4dc83e7b19f363a4925a713e8c09","observation_id":"b9c159d5-f586-40b6-bac1-4eaa004b529e","resolution":{"observed_at":"2026-08-07T12:48:19.673919Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:19.271153Z","title":null,"venue":null,"work_id":"23c42a02-9a4c-4715-b04f-980c585fa2ec","year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.945186Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:6494d4301444c1acdbedc4916f41a4ca3ebe0cf17e96b1ef7e814f1adad8175e","observation_id":"aab23a1c-03bc-44ac-95ce-cef3c6e453a7","resolution":{"observed_at":"2026-08-07T12:48:19.435511Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:18.124491Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:18.124491Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:2d0ed2c99aeb6932db9df14f5a6496b17e389617350e998009c61b2459e3d113","observation_id":"7ccd69a6-3948-4348-846b-b6b1ad5df634","resolution":{"observed_at":"2026-08-07T12:48:18.124491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:18.187357Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:18.187357Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:9801c9a98e803084f864725bff3f544726c082e0778da3c6306894dc2fefeda7","observation_id":"37612cec-ca52-40cc-ae6f-810bc7c7e8ac","resolution":{"observed_at":"2026-08-07T12:48:18.187357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:18.290076Z","title":"online\" 'onlinestring :=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:18.290076Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:f26dfc7a201b58d1a3c532e0fb5270985881f570953bd4b78b5b2bfb7cd553e5","observation_id":"01995b97-26fe-470a-b7a2-684d3b70c197","resolution":{"observed_at":"2026-08-07T12:48:18.290076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:48:18.371254Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:18.371254Z"},"links":{"citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:cd05d77125638bae4d55a12e676d7acd3a295a413179bb593ed9d710bf019e05","observation_id":"899eec16-0269-495c-a375-8e4d0cdf62fd","resolution":{"observed_at":"2026-08-07T12:48:18.371254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":48,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 2 inbound Pith citation observations for arXiv:2505.23561."}