{"as_of":"2026-08-15T19:20:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d31555c289ee9ec8d92cdafebd2a7bc3a38da7d522c9c6e528d478931ed36cf1","coverage":[{"denominator":54,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":54,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T15:32:05.075485Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T17:51:45.653822Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-30T20:15:05.280261Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"cited_work":{"arxiv_id":"2508.19774","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19774","snapshot_observed_at":"2026-06-30T20:15:05.280261Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again,","venue":null,"work_id":"5f98276c-d4f2-4ebf-9676-8398c3356c78","year":2025},"citing_paper":{"arxiv_id":"2510.10486","last_updated":"2026-04-25T03:41:56Z","snapshot_observed_at":"2026-07-06T22:32:27.698678Z","submitted_at":"2025-10-12T07:33:56Z","title":"MEASER: Malware embedding attacks on open-source LLMs","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-18T08:09:54.788025Z"},"links":{"cited_paper":"/paper/2508.19774","citing_paper":"/paper/2510.10486"},"observation_digest":"sha256:566009ee19b7e86574ccfb8d2dd20dd1cb37d6456a6b061849a57d8bd2902e7d","observation_id":"ee7971f1-41c9-4763-ae2b-a03952f5f69b","resolution":{"observed_at":"2026-05-18T08:11:06.758973Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"cited_work":{"arxiv_id":"2508.19774","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19774","snapshot_observed_at":"2026-06-30T20:15:05.280261Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again,","venue":null,"work_id":"5f98276c-d4f2-4ebf-9676-8398c3356c78","year":2025},"citing_paper":{"arxiv_id":"2605.15084","last_updated":"2026-05-14T17:07:29Z","snapshot_observed_at":"2026-08-14T02:42:06.587781Z","submitted_at":"2026-05-14T17:07:29Z","title":"PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-30T20:10:23.260802Z"},"links":{"cited_paper":"/paper/2508.19774","citing_paper":"/paper/2605.15084"},"observation_digest":"sha256:edefc578042ce7f53b7273b4e89775ae632d0f3780359f07d93ec4124a263e78","observation_id":"53017416-a208-430c-a122-82ccf21b54ec","resolution":{"observed_at":"2026-06-30T20:15:05.282609Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.19774","snapshot_observed_at":"2026-08-01T17:51:45.653822Z","title":"The art of hide and seek: Making pickle-based model supply chain poisoning stealthy again,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.653822Z"},"links":{"cited_paper":"/paper/2508.19774","citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f02ded6ffc30203146fc2ce11d97bd2a7d5490a18b8c7403c335871903a03426","observation_id":"aa0daeb5-56d7-41bd-a796-603606263552","resolution":{"observed_at":"2026-08-01T17:51:45.653822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.19774/citation-record","integrity":"/paper/2508.19774/integrity","json":"/paper/2508.19774/citation-record.json","paper":"/paper/2508.19774"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.805352Z","title":"PyTorch,","venue":null,"work_id":"56bace40-5357-48c1-896d-34fb45bdea2c","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.917999Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:f61bcca23217e2886199162ae4919bd7763f9a64944a92cc33584326f6f1cb70","observation_id":"2f588848-0530-4524-984b-79691ff27c3f","resolution":{"observed_at":"2026-08-05T15:32:05.807644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.796225Z","title":"Hugging Face – The AI community building the future,","venue":null,"work_id":"62b8e557-5b30-42c5-8de9-9841685b7939","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.921443Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:c9d8f8b82f5a53a574717435ed2907bf98c793393cc0b255cb2ce8d0d4919ef9","observation_id":"92927e76-52e6-495d-8396-f063fd64fa8c","resolution":{"observed_at":"2026-08-05T15:32:05.800525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.788923Z","title":"ModelZoo,","venue":null,"work_id":"932c1f09-5466-4e1f-afe8-3c420ad9c8f6","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.924940Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:4922bcbc88257752b8e82ed549a4f899782ff8988a2a79902e833586b52224a6","observation_id":"71cf5939-330b-43dd-b4dd-f83a2ba0badb","resolution":{"observed_at":"2026-08-05T15:32:05.791351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.780280Z","title":"BERT: Pre- training of deep bidirectional transformers for language understanding,","venue":null,"work_id":"eca06d29-6b0a-4696-b92d-50fa65614773","year":2019},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.927970Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:899ed1298816d2072fd57472887dbb04cb9f7f1df46c1821a67543520a02e9f9","observation_id":"7d8862ea-d44d-4b70-a575-2d5f447819bf","resolution":{"observed_at":"2026-08-05T15:32:05.783927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:04.931575Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.931575Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:002437135b7ef36307289c1017d49fdac736e30d8b0fdc8a514b29bed2d3f4fa","observation_id":"dc401e8f-aee9-4eaf-9572-05637e37bf34","resolution":{"observed_at":"2026-08-05T15:32:04.931575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.767734Z","title":"Language models are unsupervised multitask learners","venue":null,"work_id":"efbb59f5-d944-4d7f-a43d-4439f5613cc5","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.934443Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:d00ac35e7425116ba9e48ca4f362ecedca96895637c8194a99ebb635839e056e","observation_id":"5bf7b2ae-35c9-4604-b7ac-a24f68629765","resolution":{"observed_at":"2026-08-05T15:32:05.770423Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:04.937269Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.937269Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:d6d9c86921eaa07e09ad6672393fc7d6171e580ae2bf07b5a81386192e9de356","observation_id":"bcbefcad-6a0d-4986-aba7-b0f01eb08318","resolution":{"observed_at":"2026-08-05T15:32:04.937269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:04.940252Z","title":"Densely connected convolutional networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.940252Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:9f2a46c97caa48ea795452c9f03d452c91b5ea7a77fa55e00c2bdca3c75920bd","observation_id":"fffb4416-7db7-4f0f-ad8f-25dd569438a2","resolution":{"observed_at":"2026-08-05T15:32:04.940252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:04.943292Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.943292Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:ee6ae3fe258d9f4e494c8a3b244407d88b2b53e213560ccb3651773f5dc823e1","observation_id":"6fe83873-e6b7-45be-ac96-e080eee96a56","resolution":{"observed_at":"2026-08-05T15:32:04.943292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.746626Z","title":"safetensors,","venue":null,"work_id":"21b1a0be-a0e6-4548-b269-163622baa19c","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.946216Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:2693dd2826ff8b9ee281061f57af62e385fa3971e6367e4504fe27029e4496d4","observation_id":"c0b0317f-9843-42a8-82b7-e40a1cedeaa1","resolution":{"observed_at":"2026-08-05T15:32:05.749208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.738958Z","title":"Models are codes: Towards measuring malicious code poisoning attacks on pre-trained model hubs,","venue":null,"work_id":"a0f4b1d9-a88e-4cbd-b298-bba49fe09b08","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.948875Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:6b7c53fecad7f91446d2e02d53212937897caa7386d7f17c4fb41c8655f5eb25","observation_id":"ea7c1932-9213-4eea-9792-c3165f136121","resolution":{"observed_at":"2026-08-05T15:32:05.741832Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.731234Z","title":"picklescan,","venue":null,"work_id":"a57cdfb0-4fd3-42a5-80f3-332e2237114f","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.951816Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:c487c5f0ab1f8ca2fe5571b34fcf27de567e89eb855fd267381a777d35fef40c","observation_id":"a25f2a4c-f851-4a96-bf2a-1616a711d4d0","resolution":{"observed_at":"2026-08-05T15:32:05.733704Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.723929Z","title":"modelscan,","venue":null,"work_id":"94a0709b-c165-4a6f-9399-89c6aceb78b0","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.954438Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:73c0564dfa4fd389b265ee6a8d2c9ec8815c18007a3ebb44b573dcc19eac224e","observation_id":"80a6864f-bbfb-4fad-8172-7f4708cf57f5","resolution":{"observed_at":"2026-08-05T15:32:05.726757Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.716825Z","title":"Pickle scanning,","venue":null,"work_id":"b2b55dd7-6b2b-416c-a914-a1d938d3b53e","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.957112Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:c92e4bad35575bea23d8a7439629601b80bb7f75102d7d0b7ca2e642c6d07c2a","observation_id":"ca2955e5-d03b-4dbb-bbf4-563121eb99db","resolution":{"observed_at":"2026-08-05T15:32:05.719253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.709780Z","title":"Third-party scanner: Protect AI,","venue":null,"work_id":"382e9bd1-a5f4-4ba6-8bf3-109addeb8fa0","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.959747Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:24c5b7a6e8f5620b84b03833537114204472be4375932a20e2c97802c059ff4a","observation_id":"43aeeac9-be85-4242-8034-79d2d8325b8e","resolution":{"observed_at":"2026-08-05T15:32:05.712183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.702459Z","title":"pickle — Python object serialization,","venue":null,"work_id":"f9c579e2-ebde-4c67-a57d-143c57eaee54","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.963243Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:286baead08d139ba18c79f5dbe45579cf3210a1f7f5c3cab60526ab567037293","observation_id":"08ba6cb6-f8ea-4f23-b32b-39454a55dd3d","resolution":{"observed_at":"2026-08-05T15:32:05.705061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.695383Z","title":"We R in a Right Pickle With All These Insecure Serialization Formats,","venue":null,"work_id":"0e1520b5-682e-4f2e-b55c-483e6f5e25d3","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.965951Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:2c7222b028b2eb99805b0e7379dec633608d5e8a4a5ad6d323cd3ce890e80254","observation_id":"28c0b6de-8f1a-451a-a38d-b939f8eac87d","resolution":{"observed_at":"2026-08-05T15:32:05.697913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.687605Z","title":"Never a dill moment: Exploiting machine learning pickle files,","venue":null,"work_id":"97c98ddf-70a5-465d-827a-bdc2d410d42a","year":2021},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.969071Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:97a14983e8ab90d09b21681be30af5fc7ff8a2db0f4d369df89afd26571bfa28","observation_id":"b4466fee-1c17-4e56-aede-3a4b69cbb0bc","resolution":{"observed_at":"2026-08-05T15:32:05.690057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.680328Z","title":"Peatmoss: A dataset and initial analysis of pre-trained models in open-source software,","venue":null,"work_id":"368b9d12-9e08-4c86-a2ad-926b2c2c8b59","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.971668Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:6d8a8123b0a5cedc6b221391c81401f4eb036f089da98f09d67fa209c2625535","observation_id":"4fc8d286-e16a-4fe6-8b73-4f3b393df224","resolution":{"observed_at":"2026-08-05T15:32:05.682792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.672968Z","title":"Data scientists targeted by malicious hugging face ml models with silent backdoor,","venue":null,"work_id":"9db54e45-9f72-4466-900d-822747c9e5cb","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.974397Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:ef6aa4ae72994bb0dc8e29ffbe64accffc0b6024bcf0b5d517a4174d981b3c69","observation_id":"bd78720b-bcdd-465a-951f-32d6de164b46","resolution":{"observed_at":"2026-08-05T15:32:05.675457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.665443Z","title":"Models are code: A deep dive into security risks in ten- sorflow and keras,","venue":null,"work_id":"051a7f53-0b57-48db-ba6f-993c58bcb1ee","year":2023},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.977875Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:f0b447f77b40c725033081c207239f04e792cc55c00087ce1c34ce187ef499ad","observation_id":"04e527f6-19c5-42a9-a66a-7f312c8d6dc9","resolution":{"observed_at":"2026-08-05T15:32:05.668032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.657394Z","title":"Confused Learning: Supply Chain Attacks through Machine Learning Models,","venue":null,"work_id":"e87687c5-63a6-45a6-9e27-a35f69910e48","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.980834Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:6db1d975383db08f0385dc4e3b32fb415e906c9ab5ffc590f3f37cd447d93bd1","observation_id":"7c26da70-23fa-4a25-8cf4-3e0cc1bbfab9","resolution":{"observed_at":"2026-08-05T15:32:05.660435Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.650110Z","title":"Model File Vulnerability Bug Bounty Program,","venue":null,"work_id":"2a1630f2-d478-4a87-81d1-c82643853461","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.983886Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:785f49e352a19c2bda8dbe376583f3b50c9ae78a9ffd87ade922f8e6294ff28e","observation_id":"548f820f-3870-4eb1-b43b-5b94ac2ab157","resolution":{"observed_at":"2026-08-05T15:32:05.652569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.642781Z","title":"Numpy: The fundamental package for scientific computing with python,","venue":null,"work_id":"131c1397-a750-4098-9f4c-04f98e37641d","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.986652Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:dc2a02e1c6029ae60f631b9b5f994c299a005b8b30ae9f7218786d7c957cc2ff","observation_id":"2f9dbc58-974a-4509-8fd6-68f76a1c0ceb","resolution":{"observed_at":"2026-08-05T15:32:05.645414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.635403Z","title":"Joblib: Computing with python functions,","venue":null,"work_id":"2b1e7245-cedd-4460-8237-5c880c6f89ca","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.989458Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:8972b7cf2ea2c9fafeb607799b286b68ce5f716f40e04eee48ccbd68686102a5","observation_id":"948b09da-3bca-439f-9199-998ac266a776","resolution":{"observed_at":"2026-08-05T15:32:05.637891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.628156Z","title":"Tensorflow: An open source machine learning framework for everyone,","venue":null,"work_id":"64d86fbc-55f1-4c55-83b2-177d40554465","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.992397Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:3745ac49db41410386459c5c14a3905f59eef902a1c6eb0d8c919db585efb565","observation_id":"ec6ee654-0370-4f0d-b8ce-a95605feba21","resolution":{"observed_at":"2026-08-05T15:32:05.630819Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.621003Z","title":"Keras: Deep learning for humans,","venue":null,"work_id":"77109b8f-2658-4459-9cd4-ad0731998344","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.995435Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:c4c864b87c31c4704131f958ce0c73b4f4847f59fbb1c3dd3ce6bc68f7237f11","observation_id":"3853c030-3e37-4c5b-be4a-a084c0760b97","resolution":{"observed_at":"2026-08-05T15:32:05.623410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.613598Z","title":"Nvidia nemo: Build custom generative ai,","venue":null,"work_id":"18686cc1-7779-44a0-9fb5-095071dacb17","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:04.998754Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:4baaaf04fd5e8c31518704c065223a783c9ad9f0f5bbb8d6d36a320bd6262857","observation_id":"6bdf370f-20f6-4173-b9a8-8b4e736fb7ae","resolution":{"observed_at":"2026-08-05T15:32:05.616286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.606655Z","title":"Tensorflow Model Format,","venue":null,"work_id":"369c2814-bbcf-4ac6-8282-bfe4a59cf158","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.001840Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:d42c149865cb22bd175f86682a4f7eb53d0e4ccc941d4f1c3e1b41f0c0eeaa16","observation_id":"74871a0e-c046-4455-803d-ec5cbd0cc5aa","resolution":{"observed_at":"2026-08-05T15:32:05.608982Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.598746Z","title":"Pickora,","venue":null,"work_id":"54de4ccb-fd97-443e-b951-bce67805b336","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.004772Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:e4f7a4956c8aca12558ab641945bf63c27a06fa418be08c503a9d1b464b08d89","observation_id":"dd9f50ae-8378-4353-8144-20d9a79812a2","resolution":{"observed_at":"2026-08-05T15:32:05.602069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-08-15T17:27:11.980940Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-05T15:32:05.007662Z","title":"Deepseek-v3 technical report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.007662Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:6315770228d7654b16c91052fc6158e94ae016412644cfd88e1b5aef5873c631","observation_id":"0981f552-550e-41a6-9bac-e3cc1677ce0d","resolution":{"observed_at":"2026-08-05T15:32:05.007662Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.590812Z","title":"Chatbot arena: An open platform for evaluating llms by human preference,","venue":null,"work_id":"03fd91f3-2c48-469f-9f36-19d6033aec60","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.013067Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:e18d48c58eb74419514909cf3f3768f6559614cab45643d2f8b402b70a043e0b","observation_id":"79101cff-438b-40aa-b1bc-3cf7ce48647b","resolution":{"observed_at":"2026-08-05T15:32:05.593656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-08-15T14:02:47.366139Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-05T15:32:05.017165Z","title":"Gpt-4o system card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.017165Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:25836ca62e5ecace1071a675fac04d50592982fbdd7f82d88f6238e27328f11c","observation_id":"1d892db2-d33b-4868-878b-9ab59f91e9fe","resolution":{"observed_at":"2026-08-05T15:32:05.017165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.583483Z","title":"restrict joblib loading to only certain classes,","venue":null,"work_id":"1dc76ae5-7f1d-4fb2-9cd0-b3668b94149b","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.020045Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:ff64881f9eb582e70e276b6271698ea7fcb5c2c415529abefd3db22a89bf07e9","observation_id":"a1c8ab7a-c2e3-45f4-b6a0-13c64c66de50","resolution":{"observed_at":"2026-08-05T15:32:05.585974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.575814Z","title":"Update torch load for load from disk,","venue":null,"work_id":"afb83f7e-4829-42c1-8ba5-cb8b47e29856","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.022640Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:afbd61954d88735b88c47a0bd90cb7995c9a7a269af3110a0e36f0ae298c64f7","observation_id":"d6c77dfc-257e-4cd4-8392-dfde74a24973","resolution":{"observed_at":"2026-08-05T15:32:05.578722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.567331Z","title":"fickling: A python pickling decompiler and static analyzer,","venue":null,"work_id":"2a8ba0e8-85fb-432c-b29f-e29adae6fdf4","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.025531Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:a7b08e351ee9322f984a773cc7c945aa50def68039d11c9d5299abc28a181a82","observation_id":"1672c9d4-da20-4153-80ef-55366b9abc5d","resolution":{"observed_at":"2026-08-05T15:32:05.570730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.028062Z","title":"Pickleball: Secure deserialization of pickle-based machine learning models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.028062Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:9b4bb509de60b38c83061deedd201d077b713e56718f224808c19ffa012bbba0","observation_id":"226c8b96-09ad-422b-b4d7-8f7d77e0e100","resolution":{"observed_at":"2026-08-05T15:32:05.028062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.559795Z","title":"My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs,","venue":null,"work_id":"f8311b70-8626-42e8-923f-597ba7fa08e3","year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.031033Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:5ab84a5538e616d42e5a0c6737712bddce3e57ecb67459a8b20067bbe221724d","observation_id":"8fc2bb05-5a98-47d8-8a3f-76f20bcb9ee6","resolution":{"observed_at":"2026-08-05T15:32:05.562517Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.552066Z","title":"How to Make Hugging Face to Hug Worms: Discovering and Exploiting Unsafe Pickle.loads over Pre-Trained Large Model Hubs,","venue":null,"work_id":"6cdc7fe6-e861-4d42-a125-5d837730282c","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.033421Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:160741f6522ea30d4369c39df7c0446d4d928f2f8789bbeb79bcc97d443bf264","observation_id":"9e1ebfc8-8d0c-4c18-883c-ce8129c477cb","resolution":{"observed_at":"2026-08-05T15:32:05.554843Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12497","last_updated":"2026-07-09T13:05:41Z","snapshot_observed_at":"2026-08-07T18:10:20.660653Z","submitted_at":"2025-02-18T03:22:38Z","title":"Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12497","snapshot_observed_at":"2026-08-05T15:32:05.036028Z","title":"Sok: Understanding vulnerabilities in the large language model supply chain,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.036028Z"},"links":{"cited_paper":"/paper/2502.12497","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:4744742e894fdbc528824ce6801f9bb7e986685565deb383da6c3bf857dc8b61","observation_id":"307a95c0-19f1-43c2-9231-f7d42fd937ce","resolution":{"observed_at":"2026-08-05T15:32:05.036028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.544109Z","title":"An empirical study of artifacts and security risks in the pre-trained model supply chain,","venue":null,"work_id":"c74f0440-0fb5-4979-895a-804e4e8cf11c","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.039097Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:0feb5fd8ccddace5d855085e2b28229dd694eac929fb98bc17b9615a1d46e63c","observation_id":"93c15d67-a8da-47a3-9132-6ebe16ae7342","resolution":{"observed_at":"2026-08-05T15:32:05.547159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.536054Z","title":"Pain pickle: Bypassing python restricted unpickler for automatic exploit generation,","venue":null,"work_id":"82cb2651-47c0-4f4d-b548-845ecb54bb63","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.041609Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:77e2df20f995438f5c66b037af3ed21065068522f563f96cf28f326e5e89d111","observation_id":"011880e4-64b7-424b-8fb6-0462ca11267d","resolution":{"observed_at":"2026-08-05T15:32:05.538945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.527992Z","title":"Deep learning model reuse in the huggingface community: Challenges, benefit and trends,","venue":null,"work_id":"53b8cd15-c9bb-4df7-96a6-f5a04c627b3a","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.044345Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:281f10036ca37b7c50f42cde652e4803639aa3aef643d8706703a9d1646fa03e","observation_id":"0829b348-0e3d-44cf-ae89-5bc629029f39","resolution":{"observed_at":"2026-08-05T15:32:05.531010Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.519781Z","title":"Stegonet: Turn deep neural network into a stegomalware,","venue":null,"work_id":"3223ccaf-4d3c-4ce1-8ebc-501cd5fcedb9","year":2020},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.047211Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:b6243dddc951ba7614b4c07be2beaba22ada6449e1b65ff8d56a0e503157ef9b","observation_id":"ae1c0d9b-888b-4361-8b00-b9d470667ad2","resolution":{"observed_at":"2026-08-05T15:32:05.522841Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.511537Z","title":"Evilmodel: Hiding malware inside of neural network models,","venue":null,"work_id":"3565af53-aa14-4ae3-8c46-82aed62360f4","year":2021},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.049691Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:2e57545b45b0bfcc9c92dd90c36025549fdbd0a8dcecfa813a151cf4f77d1b49","observation_id":"3fa500a8-e688-44d7-bf38-0439bec0032c","resolution":{"observed_at":"2026-08-05T15:32:05.514618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.502904Z","title":"Evilmodel 2.0: Bringing neural network models into malware attacks,","venue":null,"work_id":"13caac3e-23aa-47cb-b660-e50a094b02e2","year":2022},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.052125Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:20461d1b08a34441e794da88122eced0e8c3fd9a76d57c7a97c24e91423c5ecb","observation_id":"f5fdaf2c-6c9f-4097-88e8-83f26c752a9a","resolution":{"observed_at":"2026-08-05T15:32:05.505981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.03593","last_updated":"2025-07-04T09:59:48Z","snapshot_observed_at":"2026-08-13T04:02:24.640968Z","submitted_at":"2024-03-06T10:27:08Z","title":"Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem","version":3},"cited_work":{"arxiv_id":"2403.03593","doi":null,"metadata_source":"pith","pith_arxiv_id":"2403.03593","snapshot_observed_at":"2026-08-05T15:32:05.171145Z","title":"Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem","venue":"cs.CR","work_id":"a48729dd-0523-4d35-ba0c-0d60501f4573","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.054641Z"},"links":{"cited_paper":"/paper/2403.03593","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:ce49abe2daac2efa4df84e0b289e65ca2fea7c03c3f930797db812588c46e723","observation_id":"2c0bd3bf-8ef3-4fca-a71c-a77ba23adccf","resolution":{"observed_at":"2026-08-05T15:32:05.206119Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.02659","last_updated":"2024-01-05T06:35:24Z","snapshot_observed_at":"2026-08-13T04:48:37.716288Z","submitted_at":"2024-01-05T06:35:24Z","title":"MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack","version":1},"cited_work":{"arxiv_id":"2401.02659","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.02659","snapshot_observed_at":"2026-08-05T15:32:05.127655Z","title":"MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack","venue":"cs.CR","work_id":"e4df8088-5888-47c7-8754-de381fe1b6a7","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.057421Z"},"links":{"cited_paper":"/paper/2401.02659","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:e6c333b173a328d5df128638d8bb08ceab4af308a3fb7324010a44563abaf567","observation_id":"a7a48b4a-c281-49ae-a8e4-a502d34a784b","resolution":{"observed_at":"2026-08-05T15:32:05.132007Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.494054Z","title":"Steganalysis of ai models lsb attacks,","venue":null,"work_id":"e2ded556-0684-4be1-8afe-530e1240e6a0","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.060292Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:b312ea99793a78463449c23690a8ebb7865c54dafbe6df15d85929bd9f4ad94b","observation_id":"e8b56047-f6fe-4414-b826-6267c9e6a83f","resolution":{"observed_at":"2026-08-05T15:32:05.497024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19310","last_updated":"2024-09-28T10:45:28Z","snapshot_observed_at":"2026-08-12T22:35:32.834398Z","submitted_at":"2024-09-28T10:45:28Z","title":"Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning","version":1},"cited_work":{"arxiv_id":"2409.19310","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.19310","snapshot_observed_at":"2026-08-05T15:32:05.099920Z","title":"Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning","venue":"cs.CR","work_id":"3af88eac-d2b0-430f-8ec9-7c50085ca0af","year":2024},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.062875Z"},"links":{"cited_paper":"/paper/2409.19310","citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:49ac49cdda2ac175b3a8708a747e24d380dda09a25b871b3293434d0ce49ecb6","observation_id":"272ee81a-8120-4854-b37a-25bf4ccf31e3","resolution":{"observed_at":"2026-08-05T15:32:05.115653Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.485465Z","title":"os\").system(","venue":null,"work_id":"51abae50-af4b-4b6a-8823-abf27815c586","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.066161Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:0841de12bf415cdb151ec5c578ae52062576b51feaceb76e386522453a54b733","observation_id":"83ab4e70-dc6b-444b-9052-8b7d62bec639","resolution":{"observed_at":"2026-08-05T15:32:05.488678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.475482Z","title":"As demonstrated in Figure 5, the function resolve_dott ed_attribute takes three parameters: obj, attr , and allow_dotted_names, among which obj and attr are particularly critical","venue":null,"work_id":"a764fb1d-3c80-4fc8-a62c-cbf9f0f9d2be","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.069408Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:3a5ea3bd1d405b9e9b414ccf034e71452fce66be9be6ad708f745be5cd714f59","observation_id":"1b9489f3-d45e-460d-b227-cfba0fe4e892","resolution":{"observed_at":"2026-08-05T15:32:05.479044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.450775Z","title":null,"venue":null,"work_id":"541c7d59-3e26-4695-8b3b-d16ab96d61f6","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.072388Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:15e8ce2b2c8cec61691402295ea693894190abf440a1900f8090f92af20c76b1","observation_id":"47e02a29-40e0-4d81-99df-b628df83c87f","resolution":{"observed_at":"2026-08-05T15:32:05.468709Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:32:05.351773Z","title":"\": 6 # List opcodes 7 try: 8 ops: List[Tuple[Any, Any, Union[ int, None]]] = list( 9 pickletools.genops(data) 10 ) 11 ... 12 for n in range (len(ops)): 13 ... 14 elif op_name ==","venue":null,"work_id":"8b712974-51b5-446a-a9c2-f5375008f79b","year":null},"citing_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T15:32:05.075485Z"},"links":{"citing_paper":"/paper/2508.19774"},"observation_digest":"sha256:b95c15ef17a3a22226bb2bd80af82b9dfb1a7dcb7bcfe2814413f9c75b5eb1ed","observation_id":"1d71b0b2-aebc-4a25-9d46-a55cbdb5c0d0","resolution":{"observed_at":"2026-08-05T15:32:05.404154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again"},"reference_resolution":{"displayed":54,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":3,"verified_fuzzy":42},"total_outbound_references":54},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 3 inbound Pith citation observations for arXiv:2508.19774."}