{"total":15,"rows":[{"id":"2303.02552","title":"An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry","created":"2023-03-05","cited_by_count":47,"area":null},{"id":"2109.04344","title":"EvilModel 2.0: Bringing Neural Network Models into Malware Attacks","created":"2021-09-09","cited_by_count":13,"area":null},{"id":"2502.04484","title":"An Empirical Analysis of Machine Learning Model and Dataset Documentation, Supply Chain, and Licensing Challenges on Hugging Face","created":"2025-02-06","cited_by_count":6,"area":null},{"id":"2311.07389","title":"Transpose Attack: Stealing Datasets with Bidirectional Training","created":"2023-11-13","cited_by_count":4,"area":null},{"id":"2505.22778","title":"Machine Learning Models Have a Supply Chain Problem","created":"2025-05-28","cited_by_count":4,"area":null},{"id":"2403.03593","title":"Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem","created":"2024-03-06","cited_by_count":3,"area":null},{"id":"2308.15502","title":"On the Steganographic Capacity of Selected Learning Models","created":"2023-08-29","cited_by_count":2,"area":null},{"id":"2509.06703","title":"On the (In)Security of Loading Machine Learning Models","created":"2025-09-08","cited_by_count":2,"area":null},{"id":"2306.17189","title":"Steganographic Capacity of Deep Learning Models","created":"2023-06-25","cited_by_count":1,"area":null},{"id":"2602.19818","title":"SafePickle: Robust and Generic ML Detection of Malicious Pickle-based ML Models","created":"2026-02-23","cited_by_count":1,"area":null},{"id":"2202.09571","title":"Bit-wise Training of Neural Network Weights","created":"2022-02-19","cited_by_count":0,"area":null},{"id":"2306.01342","title":"Covert Communication Based on the Poisoning Attack in Federated Learning","created":"2023-06-02","cited_by_count":0,"area":null},{"id":"2409.19310","title":"Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning","created":"2024-09-28","cited_by_count":0,"area":null},{"id":"2510.10486","title":"MEASER: Malware embedding attacks on open-source LLMs","created":"2025-10-12","cited_by_count":0,"area":null},{"id":"2610.04319","title":"GrayShield: Bit-Level Sanitization for Transformer Model Supply-Chain Security","created":"2026-10-03","cited_by_count":0,"area":null}],"next_cursor":null}