{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MLXG3ARNFC4O7RYGZJZ7DJPI7S","short_pith_number":"pith:MLXG3ARN","canonical_record":{"source":{"id":"2401.05949","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-01-11T14:38:19Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"2583e622158addc2ed315ce9e8b48d81f3408def8616cb186c8514e92052aeb8","abstract_canon_sha256":"22801c9933d7243905032b78606a470a048370214eb2af69a4182baabbfff28e"},"schema_version":"1.0"},"canonical_sha256":"62ee6d822d28b8efc706ca73f1a5e8fca2e84d0595644910516cd6390e857f8a","source":{"kind":"arxiv","id":"2401.05949","version":6},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.05949","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"arxiv_version","alias_value":"2401.05949v6","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.05949","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"pith_short_12","alias_value":"MLXG3ARNFC4O","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"pith_short_16","alias_value":"MLXG3ARNFC4O7RYG","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"pith_short_8","alias_value":"MLXG3ARN","created_at":"2026-07-05T09:17:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MLXG3ARNFC4O7RYGZJZ7DJPI7S","target":"record","payload":{"canonical_record":{"source":{"id":"2401.05949","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-01-11T14:38:19Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"2583e622158addc2ed315ce9e8b48d81f3408def8616cb186c8514e92052aeb8","abstract_canon_sha256":"22801c9933d7243905032b78606a470a048370214eb2af69a4182baabbfff28e"},"schema_version":"1.0"},"canonical_sha256":"62ee6d822d28b8efc706ca73f1a5e8fca2e84d0595644910516cd6390e857f8a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:17:36.411403Z","signature_b64":"IFSM77AEvB1enBD2Fa5HQuG/lFzcUjcylmf/bQJsFVSxlvBnCKi5eQWd/1fk40NqxCoeiiZfIOERBuDBhYrRBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"62ee6d822d28b8efc706ca73f1a5e8fca2e84d0595644910516cd6390e857f8a","last_reissued_at":"2026-07-05T09:17:36.410976Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:17:36.410976Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.05949","source_version":6,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:17:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"90mjxpBzrEJ+JvD1Uvn7kLxnDCQvOrJjDchMFF8O630lcSEzOPnxM5ELZ+SQJ4pPsSgX7LQvtO3rs9LmJ+p+CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:49:44.279698Z"},"content_sha256":"622c836ebaddece82596f8f241e73aa8d5c2c2e5e429a9da1880d98d8f0b00c2","schema_version":"1.0","event_id":"sha256:622c836ebaddece82596f8f241e73aa8d5c2c2e5e429a9da1880d98d8f0b00c2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MLXG3ARNFC4O7RYGZJZ7DJPI7S","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CL","authors_text":"Fengjun Pan, Jinming Wen, Luu Anh Tuan, Meihuizi Jia, Shuai Zhao","submitted_at":"2024-01-11T14:38:19Z","abstract_excerpt":"In-context learning, a paradigm bridging the gap between pre-training and fine-tuning, has demonstrated high efficacy in several NLP tasks, especially in few-shot settings. Despite being widely applied, in-context learning is vulnerable to malicious attacks. In this work, we raise security concerns regarding this paradigm. Our studies demonstrate that an attacker can manipulate the behavior of large language models by poisoning the demonstration context, without the need for fine-tuning the model. Specifically, we design a new backdoor attack method, named ICLAttack, to target large language m"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.05949","kind":"arxiv","version":6},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.05949/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:17:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2qMtRDZkE+XhL0oLswKevNrSMJ0p6KUsd4CHeEDDxcbIW+tInP+1ETaR2shM1/V4GS4QOwsmr6Tv8uzfYKfSBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:49:44.280070Z"},"content_sha256":"371be1d1986e94832c4412fe1eb977e9897d2395d06af02e2bf69f024a1e0696","schema_version":"1.0","event_id":"sha256:371be1d1986e94832c4412fe1eb977e9897d2395d06af02e2bf69f024a1e0696"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MLXG3ARNFC4O7RYGZJZ7DJPI7S/bundle.json","state_url":"https://pith.science/pith/MLXG3ARNFC4O7RYGZJZ7DJPI7S/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MLXG3ARNFC4O7RYGZJZ7DJPI7S/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T13:49:44Z","links":{"resolver":"https://pith.science/pith/MLXG3ARNFC4O7RYGZJZ7DJPI7S","bundle":"https://pith.science/pith/MLXG3ARNFC4O7RYGZJZ7DJPI7S/bundle.json","state":"https://pith.science/pith/MLXG3ARNFC4O7RYGZJZ7DJPI7S/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MLXG3ARNFC4O7RYGZJZ7DJPI7S/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MLXG3ARNFC4O7RYGZJZ7DJPI7S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"22801c9933d7243905032b78606a470a048370214eb2af69a4182baabbfff28e","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-01-11T14:38:19Z","title_canon_sha256":"2583e622158addc2ed315ce9e8b48d81f3408def8616cb186c8514e92052aeb8"},"schema_version":"1.0","source":{"id":"2401.05949","kind":"arxiv","version":6}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.05949","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"arxiv_version","alias_value":"2401.05949v6","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.05949","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"pith_short_12","alias_value":"MLXG3ARNFC4O","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"pith_short_16","alias_value":"MLXG3ARNFC4O7RYG","created_at":"2026-07-05T09:17:36Z"},{"alias_kind":"pith_short_8","alias_value":"MLXG3ARN","created_at":"2026-07-05T09:17:36Z"}],"graph_snapshots":[{"event_id":"sha256:371be1d1986e94832c4412fe1eb977e9897d2395d06af02e2bf69f024a1e0696","target":"graph","created_at":"2026-07-05T09:17:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.05949/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In-context learning, a paradigm bridging the gap between pre-training and fine-tuning, has demonstrated high efficacy in several NLP tasks, especially in few-shot settings. Despite being widely applied, in-context learning is vulnerable to malicious attacks. In this work, we raise security concerns regarding this paradigm. Our studies demonstrate that an attacker can manipulate the behavior of large language models by poisoning the demonstration context, without the need for fine-tuning the model. Specifically, we design a new backdoor attack method, named ICLAttack, to target large language m","authors_text":"Fengjun Pan, Jinming Wen, Luu Anh Tuan, Meihuizi Jia, Shuai Zhao","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-01-11T14:38:19Z","title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.05949","kind":"arxiv","version":6},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:622c836ebaddece82596f8f241e73aa8d5c2c2e5e429a9da1880d98d8f0b00c2","target":"record","created_at":"2026-07-05T09:17:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"22801c9933d7243905032b78606a470a048370214eb2af69a4182baabbfff28e","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-01-11T14:38:19Z","title_canon_sha256":"2583e622158addc2ed315ce9e8b48d81f3408def8616cb186c8514e92052aeb8"},"schema_version":"1.0","source":{"id":"2401.05949","kind":"arxiv","version":6}},"canonical_sha256":"62ee6d822d28b8efc706ca73f1a5e8fca2e84d0595644910516cd6390e857f8a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"62ee6d822d28b8efc706ca73f1a5e8fca2e84d0595644910516cd6390e857f8a","first_computed_at":"2026-07-05T09:17:36.410976Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:17:36.410976Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IFSM77AEvB1enBD2Fa5HQuG/lFzcUjcylmf/bQJsFVSxlvBnCKi5eQWd/1fk40NqxCoeiiZfIOERBuDBhYrRBw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:17:36.411403Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.05949","source_kind":"arxiv","source_version":6}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:622c836ebaddece82596f8f241e73aa8d5c2c2e5e429a9da1880d98d8f0b00c2","sha256:371be1d1986e94832c4412fe1eb977e9897d2395d06af02e2bf69f024a1e0696"],"state_sha256":"693c84668266afeb1373aa532c73ce8d72d3a10233cb191c9240116ec56eafe7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"odU5bHuVhnqPIM/7JaUCOLlyn3sVpVWZEcdduaWAUXALVt7ZlPJbqUSm3PmLjjuxPnRYitc7rr9we6NjrF6iAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T13:49:44.282035Z","bundle_sha256":"1e74d8d05631403b459218d94f51d77132321f8eb4ed1e6eda685a7441049722"}}