{"as_of":"2026-08-19T19:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d5d41a74605fa60305df50e6431337b158eac428d9817bc98e1f3300dc6a742e","coverage":[{"denominator":77,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":77,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T17:51:45.801965Z","state":"measured"},{"denominator":77,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":77,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.17503/citation-record","integrity":"/paper/2607.17503/integrity","json":"/paper/2607.17503/citation-record.json","paper":"/paper/2607.17503"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.556488Z","title":"Hugging face – the ai community building the future","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.556488Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:bf0b12fec0baec6d8148b96eb852e3022743b9364d3df455cc137b1edb774665","observation_id":"35704110-02a4-490e-8a77-9f0b6f86a560","resolution":{"observed_at":"2026-08-01T17:51:45.556488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.562913Z","title":null,"venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.562913Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:43f31099918782eb28253a198bfdff02701a5c72fab300862731bcbb5633b80f","observation_id":"1c0647a8-2662-4b70-8566-318c6be61e8f","resolution":{"observed_at":"2026-08-01T17:51:45.562913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.566381Z","title":"Opencsg,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.566381Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:a35dede807b4c2ef5a7a2331bea63076d7fc6045d85e093dca159ecf47bd3451","observation_id":"1b43a903-09a4-4a74-aa94-6ebe76b1aabc","resolution":{"observed_at":"2026-08-01T17:51:45.566381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.570126Z","title":"Modelscope,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.570126Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:5b47a4a441882e576405ef3044f144084edc8694002be0570f6d0f7b40f5898e","observation_id":"017c25f6-2a97-4a15-a96f-1f1c02029f67","resolution":{"observed_at":"2026-08-01T17:51:45.570126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.573101Z","title":"nvidia/nemotron-cascade-2-30b-a3b - hugging face,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.573101Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:bc1c6d0b3eaa6104804a0123b40c8936bc1c9fa9b4d9de69b076509cffb3f34c","observation_id":"62f5d65a-0455-4aca-a766-2f609f20280f","resolution":{"observed_at":"2026-08-01T17:51:45.573101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.576408Z","title":"google/gemma-4-31b-it - hugging face,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.576408Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:e2a969e62eabbe7c5dead794a14db3201005ddec4d00584ff880f508033967c5","observation_id":"4223c188-4e34-4ad0-9152-6444406b1e12","resolution":{"observed_at":"2026-08-01T17:51:45.576408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.579743Z","title":"microsoft/harrier-oss-v1-0.6b - hugging face,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.579743Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:db518207aee9521b11d126679bde0b005ce529ddddb3be6b050e551f68290280","observation_id":"22efd49b-0d6e-4073-93b4-681fb061d101","resolution":{"observed_at":"2026-08-01T17:51:45.579743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.582579Z","title":"openai/gpt-oss-120b - hugging face,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.582579Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:d5a479c8424b55ac44d85f3bd6bbf12342a1e912362b75b4596a282822ceabe3","observation_id":"747f71a9-522a-468a-a9b4-ea267f769e85","resolution":{"observed_at":"2026-08-01T17:51:45.582579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.585259Z","title":"[Online]","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.585259Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:3a6ae1197ff78b04e03b5cff050a87ef536b63aa6568fafb28228ee171a02b60","observation_id":"56e11e20-98bc-4414-8737-f2fbc4e34308","resolution":{"observed_at":"2026-08-01T17:51:45.585259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.588118Z","title":"Data scientists targeted by malicious hugging face ml models with silent backdoor,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.588118Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:12c237bbfb881eeb8012a5e0dcea42df6020f1849366cb6645e7a4688467f1e0","observation_id":"8b6fa409-d1c0-43a9-83bd-5592b03d0745","resolution":{"observed_at":"2026-08-01T17:51:45.588118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.590992Z","title":"Models are codes: Towards measuring malicious code poisoning attacks on pre-trained model hubs,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.590992Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:2ed7944b46ec1ae49f9db146082661e537ed8d8e901ff6278fc42ef4e4fb5732","observation_id":"5c8cc722-3874-4a1b-8122-bb964bedc8d5","resolution":{"observed_at":"2026-08-01T17:51:45.590992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.593984Z","title":"Third-party scanner: Jfrog,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.593984Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:3e786195e6a3b5c09906cb3b709f3ef9e94ddee90953ee58ea44fa9f36a23475","observation_id":"319abae0-f1a3-4820-aee5-9930b2e825ea","resolution":{"observed_at":"2026-08-01T17:51:45.593984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.596831Z","title":"third-party scanner: protect ai,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.596831Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:da0547613a4bdeb043a24a1887158a79d669550681f676f8088c9c3cf9799616","observation_id":"6c4f80cb-4ea4-4aa6-b44b-e6890312526e","resolution":{"observed_at":"2026-08-01T17:51:45.596831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.599762Z","title":"pickle scanning (hub documentation),","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.599762Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:9ab7d38572fe7093a37df5ce9c0a8cf63c4fd5929a332e84d11414eca54903ef","observation_id":"e7becbb0-4d01-43bb-a65e-fdf28873428f","resolution":{"observed_at":"2026-08-01T17:51:45.599762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.603036Z","title":"Hugging face and virustotal collaborate to strengthen ai security,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.603036Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:75651387896e8e6337cf3fd549a8db1f0f5aa8c815ccd36f5061fa0c8ceb52ed","observation_id":"6f42939d-e4ec-4b0b-81cc-e638829d2195","resolution":{"observed_at":"2026-08-01T17:51:45.603036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.606194Z","title":"Gentel - home,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.606194Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:14edc99eb8c872b9c02ee313da35adc43d368e5ff866bf02eafaab0e07982f5f","observation_id":"8f5e7171-cec4-47cc-a9cf-c6d0a71a9b01","resolution":{"observed_at":"2026-08-01T17:51:45.606194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.609086Z","title":"Opencsg - gentel example,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.609086Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:ac641a8e925f01b95bde4b68aa9cf11073f74060eddff9dbb7c139fcc0e6df5a","observation_id":"1bab09cc-e0fe-4892-ac54-2a2f46b5a60d","resolution":{"observed_at":"2026-08-01T17:51:45.609086Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.612129Z","title":"Malicious ml models discovered on hugging face platform - reversinglabs,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.612129Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:0d79749de301efe8e75d3b92177925eac910a93642d09653fed26facc3c23f38","observation_id":"4702497d-999b-42a1-993a-b9c7f636a464","resolution":{"observed_at":"2026-08-01T17:51:45.612129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.615475Z","title":"4m models scanned: Protect ai + hugging face 6 months in,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.615475Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:490dac11f45636d6c409b85d7eb72342095b63497a9afb69392ba684352793d9","observation_id":"63f68c1d-733f-47e4-a6ce-571ad899fda2","resolution":{"observed_at":"2026-08-01T17:51:45.615475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.618725Z","title":"New hugging face vulnerability exposes ai models to supply chain attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.618725Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b35a13785c21dc1ee694298d1faddf0698d8d5f3a713eb93a1ab86e3addde39a","observation_id":"0839cc4f-7c5e-4685-a27a-29b38abc3be4","resolution":{"observed_at":"2026-08-01T17:51:45.618725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.621808Z","title":"Over 100 malicious ai/ml models found on hugging face platform,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.621808Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:ed2ba9ead9d7cdb6b9461c312952425478b79d7c045eb29f37cfd968cb9be2ec","observation_id":"b956acbf-faac-41f9-8898-7c6ffbf3a753","resolution":{"observed_at":"2026-08-01T17:51:45.621808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.625425Z","title":"Malicious ml models on hugging face leverage broken pickle format to evade detection,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.625425Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:16561d527113ae3d12c95f1c4eb2c82457eac018d0411d9b6991d27ed49481d8","observation_id":"2fed1bb0-caa6-40fd-a107-b46fe5d68d02","resolution":{"observed_at":"2026-08-01T17:51:45.625425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.629111Z","title":"Montalbano, https://www.darkreading.com/application-security/hugg ing-face-ai-platform-100-malicious-code-execution-models, Feb 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.629111Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:00751d37696b2cdbac5f4bcb89a2a354026e607295faf3a5f26e44b647768fa6","observation_id":"b449cfb2-2b28-42ce-b244-cfa52a17e419","resolution":{"observed_at":"2026-08-01T17:51:45.629111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.632539Z","title":"Malicious AI Models on Hugging Face Exploit Novel A ttack Technique,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.632539Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:acbf6b0d2a7dc3b32dcac34b7ce4fd8db138d8f39bd97628206dec1fb6542c6c","observation_id":"35ee187d-367c-441d-83ba-1e685cb1947f","resolution":{"observed_at":"2026-08-01T17:51:45.632539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.635735Z","title":"Federal Register :: Request Access,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.635735Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:71187671b6451db80958e15dcbc2ecb01ce2d98f6fba2a0840e5a3c59315ee04","observation_id":"f3dc4bf0-c1bc-45f2-85c7-c640cfbfa57f","resolution":{"observed_at":"2026-08-01T17:51:45.635735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.638812Z","title":"cve.org,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.638812Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b6e2daec52eac3b7f5d8074a20af2a41bc2fe28d0f9d4b65240f30224528b2b9","observation_id":"6a67299c-50e7-4d1d-92de-cebe6156b954","resolution":{"observed_at":"2026-08-01T17:51:45.638812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.641819Z","title":"Pickleball: Secure deserialization of pickle-based machine learning models (extended report),","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.641819Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:9f21c41239357a7101f4a72f425c048ac98cc919021c8ce33981db024a8ab298","observation_id":"28c8b31d-0526-4b30-91fa-103d499fd6cd","resolution":{"observed_at":"2026-08-01T17:51:45.641819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.644897Z","title":"How to make hugging face to hug worms: Discovering and exploiting unsafe pickle.loads over pre-trained large model hubs - blackhat asia 2024,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.644897Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:aab68d77891f9f22bc30177361ab31cbce72d94de5e180076878873614c8d536","observation_id":"70ac1f57-73a5-4e00-8eac-3d37e71aa330","resolution":{"observed_at":"2026-08-01T17:51:45.644897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.648185Z","title":"coldwaterq/sectest - model card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.648185Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:899cb3d22f757f0e3619e1cac659a4f3c96ce72ed270cf8cde4bb2f05a2634f9","observation_id":"844b3273-6508-4e71-a5d3-a7c69ad07e81","resolution":{"observed_at":"2026-08-01T17:51:45.648185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.650957Z","title":"zpbrent/reuse - model card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.650957Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:3b26be50ff3978ccb212a574f446a8be4ff8e13a1776d413caa3f0d0d1a01dec","observation_id":"f99c6456-ae88-4521-b942-ca6b4018cdb8","resolution":{"observed_at":"2026-08-01T17:51:45.650957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19774","last_updated":"2025-08-27T10:59:34Z","snapshot_observed_at":"2026-08-12T14:18:26.189796Z","submitted_at":"2025-08-27T10:59:34Z","title":"The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.19774","snapshot_observed_at":"2026-08-01T17:51:45.653822Z","title":"The art of hide and seek: Making pickle-based model supply chain poisoning stealthy again,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.653822Z"},"links":{"cited_paper":"/paper/2508.19774","citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f02ded6ffc30203146fc2ce11d97bd2a7d5490a18b8c7403c335871903a03426","observation_id":"aa0daeb5-56d7-41bd-a796-603606263552","resolution":{"observed_at":"2026-08-01T17:51:45.653822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.657190Z","title":"Backdooring pickles: A decade only made things worse - defcon 30,","venue":null,"work_id":null,"year":2030},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.657190Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b3b04c62f182a02d1cae2590101bee241ec491e3941e01674c4304ded5f089fd","observation_id":"fd23ad54-185a-42de-bb37-c60e4f21fc18","resolution":{"observed_at":"2026-08-01T17:51:45.657190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.660445Z","title":"Sour pickles - blackhat us 2011,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.660445Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b4e174979d767eb274128bfed626fa8390af1f49e3cbb45b7390554e858a1fee","observation_id":"a09626da-0e74-47cc-8bf5-2f4612cecf5e","resolution":{"observed_at":"2026-08-01T17:51:45.660445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.663518Z","title":"Cwe - cwe-502: Deserialization of untrusted data (4.20),","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.663518Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:49291a6b6193ef97297e3ccdf73b4c5edb0d52416d2ead04b9999fb16fae0c8f","observation_id":"22965169-f133-46b6-9339-3e35f41320ea","resolution":{"observed_at":"2026-08-01T17:51:45.663518Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.666137Z","title":"flawed.net.nz — flawed.net.nz,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.666137Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f4b16a32e789e55e64d2008f69703e3c44d4f96580dab1b0038ca1b8c6d5b189","observation_id":"8f041be5-e4b1-45c7-8174-9e24883bc11c","resolution":{"observed_at":"2026-08-01T17:51:45.666137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.669286Z","title":"Secure pypi? the problem with trusting open source reposi- tories — activestate.com,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.669286Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:1ee82f3f6e168b54d80d676bff1ecc30edb6468b719ee4d35f947ddd97eb17ec","observation_id":"c62d8aeb-11ed-4b83-9c34-b253c8077525","resolution":{"observed_at":"2026-08-01T17:51:45.669286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.672358Z","title":"Cwe - cwe-1395: Dependency on vulnerable third-party component (4.20),","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.672358Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:740e0b057d8b269e5ce403a1ae154bc168503e26fc6db3b7149ba01b52063d11","observation_id":"5d32bdd3-6ee1-40fb-9aab-f53177984280","resolution":{"observed_at":"2026-08-01T17:51:45.672358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.675106Z","title":"Cwe - cwe-183: Permissive list of allowed inputs (4.20),","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.675106Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:1f575b70549484c96e4583b68212ee2a82113eb1643f9f8f8447e94b2f9dda30","observation_id":"a5264b62-abf4-46af-ac4d-d6f1c70ca531","resolution":{"observed_at":"2026-08-01T17:51:45.675106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.678063Z","title":"Cwe - cwe-184: Incomplete list of disallowed inputs (4.20),","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.678063Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b8a1fbb678db72682838a95e100109edccde9204daaed9aa8a984825cf599458","observation_id":"4e30de34-2a8b-458d-8406-a98b42c395ed","resolution":{"observed_at":"2026-08-01T17:51:45.678063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.680920Z","title":"weights only unpickler.py – pytorch,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.680920Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:756d95486eb51176597562df6bb50b93e1c96e12c6943ca9505d71249ca6ffc5","observation_id":"73189794-b6a1-4b39-af6a-5b883ddcb3ed","resolution":{"observed_at":"2026-08-01T17:51:45.680920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.683781Z","title":"Zollllldont download this2 - model card,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.683781Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f06b1a4586cd8b6f26481697aacf096fb17d331d876648191f2074664de91aad","observation_id":"387c2dc7-e00f-4041-b9e1-d9a6827a0cd2","resolution":{"observed_at":"2026-08-01T17:51:45.683781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.686757Z","title":"“dont download this","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.686757Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:59ba0b415d24af41a5eefbf24c5d3e30fef2be26bbf854c4599294417ad49275","observation_id":"2141c251-faec-40af-b5d3-17bb3e0170e3","resolution":{"observed_at":"2026-08-01T17:51:45.686757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.690224Z","title":"picklescan: Security scanner detecting python pickle files performing suspicious actions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.690224Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:d2e25e328ea329fffe0ce0283dee4ff09fc529ad1968a44eee617ec9a221f868","observation_id":"a0eec29c-3747-497b-8000-e351109dbf53","resolution":{"observed_at":"2026-08-01T17:51:45.690224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.694188Z","title":"Modelscan: Protection against model serialization attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.694188Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:21406af4e0da8c9e7b7b7d568434c4a83242fa05373f4ad2ac71777424d8570d","observation_id":"123db4fe-8f4f-4b39-baeb-f473081d3753","resolution":{"observed_at":"2026-08-01T17:51:45.694188Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.04490","last_updated":"2024-10-06T14:09:54Z","snapshot_observed_at":"2026-08-19T03:09:42.075176Z","submitted_at":"2024-10-06T14:09:54Z","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.04490","snapshot_observed_at":"2026-08-01T17:51:45.697781Z","title":"A large-scale exploit instrumentation study of ai/ml supply chain attacks in hugging face models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.697781Z"},"links":{"cited_paper":"/paper/2410.04490","citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:01cd800154433769eb756d32e3b7880ffbff9477388faa6d820829a4341d7908","observation_id":"788e046b-46af-4838-a942-57e1876bf66b","resolution":{"observed_at":"2026-08-01T17:51:45.697781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.701720Z","title":"pickletools - tools for pickle developers - docs.python.org,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.701720Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f95240d715cef8d29fd190a3f1ec02050c3926285f8b43a4597f8f3acbb55fb0","observation_id":"47a9acd4-b60a-406c-bcb7-b351c3497136","resolution":{"observed_at":"2026-08-01T17:51:45.701720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.705666Z","title":"zlib — compression compatible with gzip - docs.python.org,","venue":null,"work_id":null,"year":1995},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.705666Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:6111c294bfa5a6911beced58f63438e7b0020d4b471862985940111e6938f246","observation_id":"4dbbb40c-1025-4385-b5a4-ea4a22f7e2e2","resolution":{"observed_at":"2026-08-01T17:51:45.705666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.709333Z","title":"Fickling: A python pickling decompiler and static analyzer,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.709333Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:d673635cd5008fabaf919f24a97a2a137dcacfba8f3b05e663e7792f3e043c87","observation_id":"4332b548-40eb-44ff-8647-de5df7595b8a","resolution":{"observed_at":"2026-08-01T17:51:45.709333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.712443Z","title":null,"venue":null,"work_id":null,"year":1991},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.712443Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:5cdc77dacf741b9a45432c96cc7ec0cd3d322db0acdb17ce962f27ec072d5138","observation_id":"1fdaa360-8e71-457c-bd8d-5c6df8181065","resolution":{"observed_at":"2026-08-01T17:51:45.712443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.715300Z","title":"CPython: The python programming language,","venue":null,"work_id":null,"year":1991},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.715300Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:97764fa3ddca60566800c18eb026172c94302e15a91b0088ef145f197a38c6c4","observation_id":"5d30dfb9-bf8a-40d3-ad43-b25a07df1582","resolution":{"observed_at":"2026-08-01T17:51:45.715300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.718658Z","title":"Dont download this - opencsg - model card,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.718658Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:b76b964998f4e0d1345c379072c1bb673dddb1abc1fe6dbe64ebccd995ebde9e","observation_id":"24392e3a-795f-4800-a528-383bcfe9b598","resolution":{"observed_at":"2026-08-01T17:51:45.718658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.722015Z","title":"The python package index — pypi.org,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.722015Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f598d04d537fd467727db8df49e8b5f4c31f438b26c12814404d90b9866c9897","observation_id":"7b04ec25-d43d-4182-a703-70a8ca6f19b3","resolution":{"observed_at":"2026-08-01T17:51:45.722015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.725028Z","title":"Moduleguard: Understanding and detecting module conflicts in python ecosystem,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.725028Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:3978d58c93b588b5654aa47295a2a64036dfae8f12fa5aec26de4e97badb2440","observation_id":"3d2d9b78-38e2-4387-84ba-05eb33e4f632","resolution":{"observed_at":"2026-08-01T17:51:45.725028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.728268Z","title":"Reference for ultralytics/utils/patches.py — docs.ultralytics.com,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.728268Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:bc312e8ef382773f437a4ac5066764454d1fe9c1eb0e52b8c98ca6a8f6aff259","observation_id":"36fd50d1-2f57-4886-96c3-a4a4c52a7213","resolution":{"observed_at":"2026-08-01T17:51:45.728268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.731486Z","title":"Synthyraesm2-8m hugging face - huggingface.co,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.731486Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:0b76ecb0de988dac9a78fdf1676fa725ae2d8254a3f8afc78d966f931a711b61","observation_id":"0a5ac124-b40e-42ec-b819-79581dc5d1c1","resolution":{"observed_at":"2026-08-01T17:51:45.731486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.734357Z","title":"Full text search - hugging face — huggingface.co,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.734357Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:ec5c7ec386c3347b2901c3dbcdfc2fe409f978af84380f5ab788aeee9b12193b","observation_id":"0eb9cd87-2263-4ac7-80fa-36c9f942f744","resolution":{"observed_at":"2026-08-01T17:51:45.734357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.737003Z","title":"fakespot-ai/roberta-base-ai-text-detection-v1 - hugging face — huggingface.co,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.737003Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:346c9c3db1139a4a2c3c04a6186f1cb9f24f562906476dd1201aa19f29f2be99","observation_id":"6441c0fa-43bc-4cec-9dc2-f28217d68e91","resolution":{"observed_at":"2026-08-01T17:51:45.737003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.739857Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.739857Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:0bcb438e386027075aebd630d445e566b7e4051050971e36305484aca77179a9","observation_id":"3984b5dc-aeca-49f8-a56e-b9d4988dfbb6","resolution":{"observed_at":"2026-08-01T17:51:45.739857Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.742607Z","title":"Llama3-agentflan-adapter — modelscope.cn,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.742607Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:a9587f19bf0d23a9d25445db188bf60362b71988f7be58f4d21281d3f881221a","observation_id":"b27be28b-98b5-4450-974a-cf0a2fd698cd","resolution":{"observed_at":"2026-08-01T17:51:45.742607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.746215Z","title":"Github - swisskyrepo/payloadsallthethings: A list of use- ful payloads and bypass for web application security and p entest/ctf — github.com,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.746215Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:369d7ad03bf955f53da2fafca5dce90a5a61828ffc37fb0c923c4ef0a79d3bfb","observation_id":"5b23d2e4-5290-48c0-8fed-83b4dc42f2b1","resolution":{"observed_at":"2026-08-01T17:51:45.746215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.749135Z","title":"Online - reverse shell generator — revshells.com,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.749135Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:548fe19c53300e74c27cca0eea57b57e37e343c2923c31fbece69b62ad14cb05","observation_id":"4bc4f04d-82cd-475c-b4eb-8a08531e1670","resolution":{"observed_at":"2026-08-01T17:51:45.749135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.751873Z","title":"Adds dataflow analysis, generalizes constant opcodes, and cleans up injection by esultanik · pull request #28 · trailofbits/fickling — github.com,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.751873Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:5676a045a9cf7515bce2dbc85e8dc49f894686fcfca4da43c8fe56284c91650c","observation_id":"f1fd5f67-0975-4b83-a75e-def0da941d53","resolution":{"observed_at":"2026-08-01T17:51:45.751873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.754610Z","title":"Trail of bits — trailofbits.com,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.754610Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:ec276c6e0e075fe8c91e20a55e16ac965efd58bdcc13540e84f47cdf2dfbae6f","observation_id":"2c25d574-4db3-49f5-91cf-9c39bc6edd25","resolution":{"observed_at":"2026-08-01T17:51:45.754610Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.757319Z","title":"Welcome to fastai – fastai,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.757319Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:eae29c79089e59408654f8210bf8ffca52e1e80a400a93474b90f9142f8405f0","observation_id":"b469c063-44db-4fa2-a607-bfd9a8dc9a2d","resolution":{"observed_at":"2026-08-01T17:51:45.757319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.760083Z","title":"Github - columbia/pickleball: Pickleball protects users from dangerous pickle-based ml models — github.com,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.760083Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:1e21c6c15aac4540c9d706d5e20118e965c3fe0c0eaab699cdab1b7e6290bd26","observation_id":"74f7578b-e045-4918-a997-4ec08d5e01d0","resolution":{"observed_at":"2026-08-01T17:51:45.760083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.763189Z","title":"Github - s2e-lab/hf-model-analyzer - modeltracer,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.763189Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:7230d6c568511d4bb5d3bacc1866ca0813bdeed9eb416a70b9e68c7b4fdf40fe","observation_id":"fa859f60-af0b-406a-8785-21e04845831f","resolution":{"observed_at":"2026-08-01T17:51:45.763189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.766256Z","title":"Raft - pypi,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.766256Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:48a804e1a11d6655c8ea9fe5bc841a00d46a32ae699ac7d8e4025f20d01a5218","observation_id":"260adfa9-02e6-4120-9517-4d8a73692fb1","resolution":{"observed_at":"2026-08-01T17:51:45.766256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.769921Z","title":"Dont download this model - modelscope - model card,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.769921Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:7d1aca79edbd24e3c81e9b6d94240090453fb5ec534113bf8a2383299a177013","observation_id":"cb1f781d-2d49-4381-889d-26c3f7ca19a2","resolution":{"observed_at":"2026-08-01T17:51:45.769921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.773856Z","title":"Shadowpickle-bench/dont download this - github.com,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.773856Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:daaf13b84151adbc9e490222b7d80bdd43209487be46031b12467c125a0c3ea8","observation_id":"f9c6e17c-7d8d-4e91-bedf-d179f9bfe996","resolution":{"observed_at":"2026-08-01T17:51:45.773856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.777605Z","title":"Github - dashingsoft/pyarmor: A tool used to obfuscate python scripts , bind obfuscated scripts to fixed machine or expire obfus- cated scripts. — github.com,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.777605Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:412ea2280c1867a3d94768bdaff08803bd956128334cbdb33461fccd253036d1","observation_id":"fee03c52-7a55-40db-80f5-c8281c99a6e2","resolution":{"observed_at":"2026-08-01T17:51:45.777605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.781231Z","title":"Github - nyudenkov/pysentry: Scan your python depen- dencies for known security vulnerabilities with rust-powered scanner - github.com,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.781231Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f28e3fd195d678b89469e22d30f262d7254c9c0c6a52596dfca13c2202b373e3","observation_id":"b3f79214-8a8d-41ae-aada-c8b7d3d76287","resolution":{"observed_at":"2026-08-01T17:51:45.781231Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.784734Z","title":"Github - splitline/pickora: A toy compiler that can convert python scripts to pickle bytecode,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.784734Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:c16325040354d9bcbd8ad7f8b145772e2fd287d4ad7725d26673a48e750f50c2","observation_id":"6013a5f3-d46c-4216-855d-fe8cdc428a6b","resolution":{"observed_at":"2026-08-01T17:51:45.784734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.788078Z","title":"Github - security-pride/malhug,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.788078Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:f047eaa22e6b31bc5efd2b1467d5c5e62ab5e87c79b081e0282162fb950cba6b","observation_id":"df7a2e59-9936-4225-a56b-ea0b06d4fc48","resolution":{"observed_at":"2026-08-01T17:51:45.788078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.792127Z","title":"/bin/bash","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.792127Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:7cb9366c8be8fbd68f78412b3e29482fcdd45397d82f29b501f3f2a386bad77d","observation_id":"26a7b358-4799-4eec-aa52-385bb33bfd3e","resolution":{"observed_at":"2026-08-01T17:51:45.792127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.795575Z","title":"The collected payloads are Pickled into self-contained files, such that they can be directly injected into PyTorch models, as they are both binary data with the same set of opcodes","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.795575Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:58f87c4d3f6fc17b7c3c2f8c922646f95c8c5ee16e76c9c20680d2f220de7354","observation_id":"e9daeb42-040c-4fcc-899c-ca99ac5c6657","resolution":{"observed_at":"2026-08-01T17:51:45.795575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.798789Z","title":"We then edit the memory addresses of the injecting Pickle file to be greater than TABLE XVII: Open-source SOTA’s performance on SHADOWPICKLEvs","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.798789Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:278edf7e988831c2f932371a72666b8ede329af7d30492a6f2ed284482d0b661","observation_id":"a690f43c-2654-45c0-96cd-abb0b5fe9c03","resolution":{"observed_at":"2026-08-01T17:51:45.798789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:51:45.801965Z","title":"cat /etc/passwd","venue":null,"work_id":null,"year":2039},"citing_paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-01T17:51:45.801965Z"},"links":{"citing_paper":"/paper/2607.17503"},"observation_digest":"sha256:4b8a9b0c1d0b81fecbebeab10804d50076b3518bdf3be2c89704093bb4c8ae86","observation_id":"e27e960a-f36e-4cda-874d-be4afda9b60d","resolution":{"observed_at":"2026-08-01T17:51:45.801965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.17503","last_updated":"2026-07-20T03:18:15Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T14:18:33.596475Z","submitted_at":"2026-07-20T03:18:15Z","title":"ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks"},"reference_resolution":{"displayed":77,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":77,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":77},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 77 of 77 outbound references and 0 inbound Pith citation observations for arXiv:2607.17503."}