Pith. sign in

Paper Citation Record · LEDGER

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again

As of 20 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 3 inbound Pith citation observations for arXiv:2508.19774.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2508.19774 v1

Coverage vector

measured 54 of 54 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-05T15:32:05.075485Z

measured 57 of 57 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-01T17:51:45.653822Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-06-30T20:15:05.280261Z

Reference resolution

54 of 54 outbound references displayed

  • verified exact3
  • verified fuzzy42
  • unresolved9
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 2f588848-0530-4524-984b-79691ff27c3f · outbound

This paper cites PyTorch,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again PyTorch,

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.807644Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.917999Z digest=sha256:92e0359673006084d63b2522cf1fd4fbe215eab2d672671690b2e1a70d8891e0

Observation 92927e76-52e6-495d-8396-f063fd64fa8c · outbound

This paper cites Hugging Face – The AI community building the future,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Hugging Face – The AI community building the future,

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.800525Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.921443Z digest=sha256:cb4f5168838414705f7261d8532d2c3e5793f8e4aa9e1ad7e948908a67a09615

Observation 71cf5939-330b-43dd-b4dd-f83a2ba0badb · outbound

This paper cites ModelZoo,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again ModelZoo,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.791351Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.924940Z digest=sha256:a2affefc43b4b6b0df4f679a89f81803a2b444aa9a7334af0deba5865fdb9426

Observation 7d8862ea-d44d-4b70-a575-2d5f447819bf · outbound

This paper cites BERT: Pre- training of deep bidirectional transformers for language understanding,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again BERT: Pre- training of deep bidirectional transformers for language understanding,

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.783927Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.927970Z digest=sha256:a51fc5a2914ad4c200ee3dd6c62b3b1449285dd61407effffd826567abbd4c06

Observation dc401e8f-aee9-4eaf-9572-05637e37bf34 · outbound

This paper cites Attention is all you need,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Attention is all you need,

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-05T15:32:04.931575Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:32:04.931575Z digest=sha256:002437135b7ef36307289c1017d49fdac736e30d8b0fdc8a514b29bed2d3f4fa

Observation 5bf7b2ae-35c9-4604-b7ac-a24f68629765 · outbound

This paper cites Language models are unsupervised multitask learners.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Language models are unsupervised multitask learners

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.770423Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.934443Z digest=sha256:fad8802bb298508600d76926efeab837a4a9bde6e859f49cdba48c64be5c36a4

Observation bcbefcad-6a0d-4986-aba7-b0f01eb08318 · outbound

This paper cites Deep residual learning for image recognition,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Deep residual learning for image recognition,

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-05T15:32:04.937269Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:32:04.937269Z digest=sha256:d6d9c86921eaa07e09ad6672393fc7d6171e580ae2bf07b5a81386192e9de356

Observation fffb4416-7db7-4f0f-ad8f-25dd569438a2 · outbound

This paper cites Densely connected convolutional networks,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Densely connected convolutional networks,

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-05T15:32:04.940252Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:32:04.940252Z digest=sha256:9f2a46c97caa48ea795452c9f03d452c91b5ea7a77fa55e00c2bdca3c75920bd

Observation 6fe83873-e6b7-45be-ac96-e080eee96a56 · outbound

This paper cites An image is worth 16x16 words: Transformers for image recognition at scale,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again An image is worth 16x16 words: Transformers for image recognition at scale,

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-05T15:32:04.943292Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:32:04.943292Z digest=sha256:ee6ae3fe258d9f4e494c8a3b244407d88b2b53e213560ccb3651773f5dc823e1

Observation c0b0317f-9843-42a8-82b7-e40a1cedeaa1 · outbound

This paper cites safetensors,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again safetensors,

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.749208Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.946216Z digest=sha256:41e214b520b3831f18d951ac0d797d9d9aee01755190539cafdb63037cf0b275

Observation ea7c1932-9213-4eea-9792-c3165f136121 · outbound

This paper cites Models are codes: Towards measuring malicious code poisoning attacks on pre-trained model hubs,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Models are codes: Towards measuring malicious code poisoning attacks on pre-trained model hubs,

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.741832Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.948875Z digest=sha256:1a28dee2d1777b59276ebd0a2b51cd2404a5ddc938a84ca7a95bd53c6ebb2c51

Observation a25f2a4c-f851-4a96-bf2a-1616a711d4d0 · outbound

This paper cites picklescan,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again picklescan,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.733704Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.951816Z digest=sha256:3e5ab948160fe89dd36819e488aec73e4894855d2956d582eac38ac09ea83422

Observation 80a6864f-bbfb-4fad-8172-7f4708cf57f5 · outbound

This paper cites modelscan,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again modelscan,

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.726757Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.954438Z digest=sha256:0231b937b69ab0505cf8d5bd1d5c656638aaa3a155ad4db6952cbdda731a6569

Observation ca2955e5-d03b-4dbb-bbf4-563121eb99db · outbound

This paper cites Pickle scanning,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Pickle scanning,

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.719253Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.957112Z digest=sha256:552c23c7ff2098a564140c5b3c7f10df67b5ea16373bb2dc8b856451a507cdd8

Observation 43aeeac9-be85-4242-8034-79d2d8325b8e · outbound

This paper cites Third-party scanner: Protect AI,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Third-party scanner: Protect AI,

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.712183Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.959747Z digest=sha256:287ce77ebfecb36784583cae31a104621b2003cb27769989abf569a2084c26f6

Observation 08ba6cb6-f8ea-4f23-b32b-39454a55dd3d · outbound

This paper cites pickle — Python object serialization,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again pickle — Python object serialization,

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.705061Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.963243Z digest=sha256:e2cfc0a87c53bc8cceeeb6073d78403fb2674fe8fd600f070cfe4797e2e7a48f

Observation 28c0b6de-8f1a-451a-a38d-b939f8eac87d · outbound

This paper cites We R in a Right Pickle With All These Insecure Serialization Formats,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again We R in a Right Pickle With All These Insecure Serialization Formats,

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.697913Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.965951Z digest=sha256:ca5c68a4e970fda59888b94903a247ffc49b7442bffcd40eff9126f9f0cae8ea

Observation b4466fee-1c17-4e56-aede-3a4b69cbb0bc · outbound

This paper cites Never a dill moment: Exploiting machine learning pickle files,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Never a dill moment: Exploiting machine learning pickle files,

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.690057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.969071Z digest=sha256:048804509b10787e024af51e43046f23b712a46d3ed979dd52057822dd9af603

Observation 4fc8d286-e16a-4fe6-8b73-4f3b393df224 · outbound

This paper cites Peatmoss: A dataset and initial analysis of pre-trained models in open-source software,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Peatmoss: A dataset and initial analysis of pre-trained models in open-source software,

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.682792Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.971668Z digest=sha256:f29c7c460bde19666206562f45979649275a2ab97b4088003cb402157de49493

Observation bd78720b-bcdd-465a-951f-32d6de164b46 · outbound

This paper cites Data scientists targeted by malicious hugging face ml models with silent backdoor,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Data scientists targeted by malicious hugging face ml models with silent backdoor,

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.675457Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.974397Z digest=sha256:83e105374e9a0f94ccd10f30a0916d6bb002e5378b435396fd0a15d978c8e785

Observation 04e527f6-19c5-42a9-a66a-7f312c8d6dc9 · outbound

This paper cites Models are code: A deep dive into security risks in ten- sorflow and keras,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Models are code: A deep dive into security risks in ten- sorflow and keras,

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.668032Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.977875Z digest=sha256:81864466679dbf617a09fe9517abb80cfe7f310aebdb574c5355e339f510bcff

Observation 7c26da70-23fa-4a25-8cf4-3e0cc1bbfab9 · outbound

This paper cites Confused Learning: Supply Chain Attacks through Machine Learning Models,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Confused Learning: Supply Chain Attacks through Machine Learning Models,

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.660435Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.980834Z digest=sha256:be97e51d926b1ff76abd2ede07058014f513375cbd186985c2f80c390ab2b6e2

Observation 548f820f-3870-4eb1-b43b-5b94ac2ab157 · outbound

This paper cites Model File Vulnerability Bug Bounty Program,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Model File Vulnerability Bug Bounty Program,

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.652569Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.983886Z digest=sha256:7d0031216395af62c9525ffad92b07271b7a9943bbe6c31955db8242a8bfc0b1

Observation 2f9dbc58-974a-4509-8fd6-68f76a1c0ceb · outbound

This paper cites Numpy: The fundamental package for scientific computing with python,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Numpy: The fundamental package for scientific computing with python,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.645414Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.986652Z digest=sha256:c025f1226d6ab1bbd86621c5555ae309fbf4b62484b63f58e066afaee90a772a

Observation 948b09da-3bca-439f-9199-998ac266a776 · outbound

This paper cites Joblib: Computing with python functions,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Joblib: Computing with python functions,

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.637891Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.989458Z digest=sha256:f4fd900df8db98467560b162f6a9ae78dc1e567bb4898af134f7282d8da86c70

Observation ec6ee654-0370-4f0d-b8ce-a95605feba21 · outbound

This paper cites Tensorflow: An open source machine learning framework for everyone,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Tensorflow: An open source machine learning framework for everyone,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.630819Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.992397Z digest=sha256:c39cbd32c3f88c4274717fda763e00b054e08cd0ff9ca3c3752cf2326e7a4813

Observation 3853c030-3e37-4c5b-be4a-a084c0760b97 · outbound

This paper cites Keras: Deep learning for humans,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Keras: Deep learning for humans,

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.623410Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.995435Z digest=sha256:ce766874e477616a669ba9fc13dbc6b9f8c1de6a3ab3ff12156193e475631e6b

Observation 6bdf370f-20f6-4173-b9a8-8b4e736fb7ae · outbound

This paper cites Nvidia nemo: Build custom generative ai,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Nvidia nemo: Build custom generative ai,

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.616286Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:04.998754Z digest=sha256:f97545ea60896b4d05d2682e492809274c1cf4415ed55991e8c06dd54d55be5c

Observation 74871a0e-c046-4455-803d-ec5cbd0cc5aa · outbound

This paper cites Tensorflow Model Format,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Tensorflow Model Format,

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.608982Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.001840Z digest=sha256:3b8c520a6d71a557a99f946a2f514006f14eb0def6954407b7b8c6a4e652b39e

Observation dd9f50ae-8378-4353-8144-20d9a79812a2 · outbound

This paper cites Pickora,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Pickora,

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.602069Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.004772Z digest=sha256:ab0242a38e70d9e8152013e2ce706722876755ac737c52f50995d5d88d059b0c

Observation 0981f552-550e-41a6-9bac-e3cc1677ce0d · outbound

This paper cites DeepSeek-V3 Technical Report.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again DeepSeek-V3 Technical Report

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-05T15:32:05.007662Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:32:05.007662Z digest=sha256:2b773a08e6ea02c1ee3d2a8c22008944cb03c40afd1b590e7f1b726c613bf966

Observation 79101cff-438b-40aa-b1bc-3cf7ce48647b · outbound

This paper cites Chatbot arena: An open platform for evaluating llms by human preference,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Chatbot arena: An open platform for evaluating llms by human preference,

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.593656Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.013067Z digest=sha256:539da9d0fcfdb923cd4d59b112ea901810ce78aef39c87f50f809f5f69e8d41f

Observation 1d892db2-d33b-4868-878b-9ab59f91e9fe · outbound

This paper cites GPT-4o System Card.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again GPT-4o System Card

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-05T15:32:05.017165Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:32:05.017165Z digest=sha256:25836ca62e5ecace1071a675fac04d50592982fbdd7f82d88f6238e27328f11c

Observation a1c8ab7a-c2e3-45f4-b6a0-13c64c66de50 · outbound

This paper cites restrict joblib loading to only certain classes,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again restrict joblib loading to only certain classes,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.585974Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.020045Z digest=sha256:5c5ab50ab4feafb0cfd7898cb96f1715d2b2d1be9659729153e6fb620ada4de6

Observation d6c77dfc-257e-4cd4-8392-dfde74a24973 · outbound

This paper cites Update torch load for load from disk,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Update torch load for load from disk,

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.578722Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.022640Z digest=sha256:fff5bf99a3e5cf38c2e1179c9efea77f6672600f61044ddd82382b2dd860ae6f

Observation 1672c9d4-da20-4153-80ef-55366b9abc5d · outbound

This paper cites fickling: A python pickling decompiler and static analyzer,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again fickling: A python pickling decompiler and static analyzer,

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.570730Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.025531Z digest=sha256:b2902cc8f6f02f1fb82e41995871faff6ecf7874d6dd296347ae4120898dd11d

Observation 226c8b96-09ad-422b-b4d7-8f7d77e0e100 · outbound

This paper cites Pickleball: Secure deserialization of pickle-based machine learning models,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Pickleball: Secure deserialization of pickle-based machine learning models,

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-05T15:32:05.028062Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:32:05.028062Z digest=sha256:9b4bb509de60b38c83061deedd201d077b713e56718f224808c19ffa012bbba0

Observation 8fc2bb05-5a98-47d8-8a3f-76f20bcb9ee6 · outbound

This paper cites My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs,

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.562517Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.031033Z digest=sha256:bef8cac5a952172ad3c08e986b9a918cdbd27814bbba6b250447ccf7e63bf6bf

Observation 9e1ebfc8-8d0c-4c18-883c-ce8129c477cb · outbound

This paper cites How to Make Hugging Face to Hug Worms: Discovering and Exploiting Unsafe Pickle.loads over Pre-Trained Large Model Hubs,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again How to Make Hugging Face to Hug Worms: Discovering and Exploiting Unsafe Pickle.loads over Pre-Trained Large Model Hubs,

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.554843Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.033421Z digest=sha256:7e804579e89fca28bc93d097e372d52dc6c1b4dba12101842c40a589ad2f7ad4

Observation 307a95c0-19f1-43c2-9231-f7d42fd937ce · outbound

This paper cites Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-05T15:32:05.036028Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:32:05.036028Z digest=sha256:0fea609ac9c089bb4dfbc7c1cec35a2805b1c2da489a3234a0a878f640290f36

Observation 93c15d67-a8da-47a3-9132-6ebe16ae7342 · outbound

This paper cites An empirical study of artifacts and security risks in the pre-trained model supply chain,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again An empirical study of artifacts and security risks in the pre-trained model supply chain,

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.547159Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.039097Z digest=sha256:587d6137c290fd86777ffa7ed20b822abbbd214a444a0010d93b5668ea617406

Observation 011880e4-64b7-424b-8fb6-0462ca11267d · outbound

This paper cites Pain pickle: Bypassing python restricted unpickler for automatic exploit generation,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Pain pickle: Bypassing python restricted unpickler for automatic exploit generation,

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.538945Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.041609Z digest=sha256:290df7ece37c761cd779e6f89f2bf9b55057328d043691128102166baa174c50

Observation 0829b348-0e3d-44cf-ae89-5bc629029f39 · outbound

This paper cites Deep learning model reuse in the huggingface community: Challenges, benefit and trends,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Deep learning model reuse in the huggingface community: Challenges, benefit and trends,

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.531010Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.044345Z digest=sha256:ed4e742afb1c418539abf27e923c9528fadcb1c8b0ef78e5b206575e84a21ca6

Observation ae1c0d9b-888b-4361-8b00-b9d470667ad2 · outbound

This paper cites Stegonet: Turn deep neural network into a stegomalware,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Stegonet: Turn deep neural network into a stegomalware,

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.522841Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.047211Z digest=sha256:9c190f98b9cd13fed85d0fd56ecaf273d67062bb74a9766bf6039a2dcdb456f3

Observation 3fa500a8-e688-44d7-bf38-0439bec0032c · outbound

This paper cites Evilmodel: Hiding malware inside of neural network models,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Evilmodel: Hiding malware inside of neural network models,

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.514618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.049691Z digest=sha256:35a6a7486158c9b6cc5280c4b527e1eac7683533a24de541aaa393f47da7872a

Observation f5fdaf2c-6c9f-4097-88e8-83f26c752a9a · outbound

This paper cites Evilmodel 2.0: Bringing neural network models into malware attacks,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Evilmodel 2.0: Bringing neural network models into malware attacks,

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.505981Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.052125Z digest=sha256:a511695f29720f12fbab92dce0c4e3253b4c1e602dc2f4849b43a54501b2b6cf

Observation 2c0bd3bf-8ef3-4fca-a71c-a77ba23adccf · outbound

This paper cites Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem

Reference 47

Resolution
verified exact
local_arxiv, observed 2026-08-05T15:32:05.206119Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.054641Z digest=sha256:1130e1549bfc474a828e045ac24b94d96a9b8fcd2aa5e7c66cd8ce554ca666ad

Observation a7a48b4a-c281-49ae-a8e4-a502d34a784b · outbound

This paper cites MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack

Reference 48

Resolution
verified exact
local_arxiv, observed 2026-08-05T15:32:05.132007Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.057421Z digest=sha256:f4b81deb532b3c9c387377ae3a2394bf1df3e7f87d6606c754bed81e4b051a56

Observation e8b56047-f6fe-4414-b826-6267c9e6a83f · outbound

This paper cites Steganalysis of ai models lsb attacks,.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Steganalysis of ai models lsb attacks,

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.497024Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.060292Z digest=sha256:8cb6c9fbe89744ba36bf02ec0438312cefd499ca67b3b53faef27e104c908421

Observation 272ee81a-8120-4854-b37a-25bf4ccf31e3 · outbound

This paper cites Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning

Reference 50

Resolution
verified exact
local_arxiv, observed 2026-08-05T15:32:05.115653Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.062875Z digest=sha256:53e5f3c1cc78aacf584888138e7137314e91b821a45b10b9663b2727f5348f58

Observation 83ab4e70-dc6b-444b-9052-8b7d62bec639 · outbound

This paper cites os").system(.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again os").system(

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.488678Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.066161Z digest=sha256:092f1b2185e1b8ccbfda5d336cf891ca30b5633b68f5a4b06f0fde2d4038487d

Observation 1b9489f3-d45e-460d-b227-cfba0fe4e892 · outbound

This paper cites As demonstrated in Figure 5, the function resolve_dott ed_attribute takes three parameters: obj, attr , and allow_dotted_names, among which obj and attr are particularly critical.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again As demonstrated in Figure 5, the function resolve_dott ed_attribute takes three parameters: obj, attr , and allow_dotted_names, among which obj and attr are particularly critical

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.479044Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.069408Z digest=sha256:2137c3cec05a669cfa3d17e6b47057642beb25939b34a810eb72ef36c764c099

Observation 47e02a29-40e0-4d81-99df-b628df83c87f · outbound

This paper cites an unresolved cited work.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-08-05T15:32:05.468709Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.072388Z digest=sha256:e7de79bc238a95833cc88a2ca45bbc60955448685483745cac193083541b6747

Observation 1d71b0b2-aebc-4a25-9d46-a55cbdb5c0d0 · outbound

This paper cites ": 6 # List opcodes 7 try: 8 ops: List[Tuple[Any, Any, Union[ int, None]]] = list( 9 pickletools.genops(data) 10 ) 11 ... 12 for n in range (len(ops)): 13 ... 14 elif op_name ==.

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again ": 6 # List opcodes 7 try: 8 ops: List[Tuple[Any, Any, Union[ int, None]]] = list( 9 pickletools.genops(data) 10 ) 11 ... 12 for n in range (len(ops)): 13 ... 14 elif op_name ==

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-05T15:32:05.404154Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-05T15:32:05.075485Z digest=sha256:9f1dd97c8dcea5a8a582c0083e9f0483415b5ac7cf6003114188547190db46b4

Pith citing papers

Observation ee7971f1-41c9-4763-ae2b-a03952f5f69b · inbound

MEASER: Malware embedding attacks on open-source LLMs cites this paper.

MEASER: Malware embedding attacks on open-source LLMs The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again

Reference 20

Resolution
verified exact
arxiv_id, observed 2026-05-18T08:11:06.758973Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-05-18T08:09:54.788025Z digest=sha256:f4b90b07d59e16cc95cfe015582b90b371aeaaeed1c711e1797386288bce94d4

Observation 53017416-a208-430c-a122-82ccf21b54ec · inbound

PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations cites this paper.

PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again

Reference 17

Resolution
verified exact
arxiv_id, observed 2026-06-30T20:15:05.282609Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-06-30T20:10:23.260802Z digest=sha256:45926feabf86eff0aaea91e0264666734d0ed8f2f2c6aa9986aeeb9d5168681b

Observation aa0daeb5-56d7-41bd-a796-603606263552 · inbound

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks cites this paper.

ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-01T17:51:45.653822Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-01T17:51:45.653822Z digest=sha256:f02ded6ffc30203146fc2ce11d97bd2a7d5490a18b8c7403c335871903a03426