PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Models
Not on the map. Why?
Abstract (arXiv)
Recent advances in large language models (LLMs) have led to their extensive global deployment, and ensuring their safety calls for comprehensive and multilingual toxicity evaluations. However, existing toxicity benchmarks are overwhelmingly focused on English, posing serious risks to deploying LLMs in other languages. We address this by introducing PolygloToxicityPrompts (PTP), the first large-scale multilingual toxicity evaluation benchmark of 425K naturally occurring prompts spanning 17 languages. We overcome the scarcity of naturally occurring toxicity in web-text and ensure coverage across languages with varying resources by automatically scraping over 100M web-text documents. Using PTP, we investigate research questions to study the impact of model size, prompt language, and instruction and preference-tuning methods on toxicity by benchmarking over 60 LLMs. Notably, we find that toxicity increases as language resources decrease or model size increases. Although instruction- and preference-tuning reduce toxicity, the choice of preference-tuning method does not have any significant impact. Our findings shed light on crucial shortcomings of LLM safeguarding and highlight areas for future research.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Builds on 57 of its 80 references that are in the map. First posted on arXiv 15 May 2024.
Builds on
57 of 80 references.
References · 57
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,767
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2023Qwen Technical Reportcited by 3,273
- 2023Mistral 7Bcited by 3,065
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
38 more
- 2020mT5: A massively multilingual pre-trained text-to-text transformercited by 1,813
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
- 2023A General Theoretical Paradigm to Understand Learning from Human Preferencescited by 906
- 2019DialoGPT: Large-Scale Generative Pre-training for Conversational Response Generationcited by 842
- 2020The State and Fate of Linguistic Diversity and Inclusion in the NLP Worldcited by 789
- 2024Yi: Open Foundation Models by 01.AIcited by 706
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
- 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 520
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 481
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 434
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2019Nuanced Metrics for Measuring Unintended Bias with Real Data for Text Classificationcited by 396
- 2024Aya Model: An Instruction Finetuned Open-Access Multilingual Language Modelcited by 292
- 2023Low-Resource Languages Jailbreak GPT-4cited by 290
- 2021Annotators with Attitudes: How Annotator Beliefs And Identities Bias Toxic Language Detectioncited by 258
- 2024A Survey on Data Selection for Language Modelscited by 230
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 224
- 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 222
- 2016Ex Machina: Personal Attacks Seen at Scalecited by 208
- 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
- 2020Social Biases in NLP Models as Barriers for Persons with Disabilitiescited by 182
- 2022A New Generation of Perspective API: Efficient Multilingual Character-level Transformerscited by 181
- 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 172
- 2022"I'm sorry to hear that": Finding New Biases in Language Models with a Holistic Descriptor Datasetcited by 160
- 2021Charformer: Fast Character Transformers via Gradient-based Subword Tokenizationcited by 158
- 2023Understanding Catastrophic Forgetting in Language Models via Implicit Inferencecited by 138
- 2022ProsocialDialog: A Prosocial Backbone for Conversational Agentscited by 109
- 2021Challenges in Automated Debiasing for Toxic Language Detectioncited by 95
- 2021Just Say No: Analyzing the Stance of Neural Dialogue Generation in Offensive Contextscited by 56
- 2023All Languages Matter: On the Multilingual Safety of Large Language Modelscited by 51
50 most cited of 57 All 57 (JSON)
Built on by
Citing papers per year: 2024: 6; 2025: 9; 2026: 1.
16 papers.
Sort:
By area:
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harmcited by 67
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 57
- 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating Itcited by 42
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
- 2024Teuken-7B-Base & Teuken-7B-Instruct: Towards European LLMscited by 20
- 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lenscited by 18
- 2024Mix Data or Merge Models? Optimizing for Diverse Multi-Task Learningcited by 17
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safetycited by 9
- 2024Alignment at Pre-training! Towards Native Alignment for Arabic LLMscited by 7
- 2025Benchmarking Multi-National Value Alignment for Large Language Modelscited by 7
- 2024LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistenciescited by 6
- 2025Aligned Probing: Relating Toxic Behavior and Model Internalscited by 5
4 more
- 2024Composable Interventions for Language Modelscited by 4
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxificationcited by 3
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMscited by 1
- 2025A Multi-Perspective Benchmark and Moderation Model for Evaluating Safety and Adversarial Robustnesscited by 0
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMs1 May 2026
- 2025A Multi-Perspective Benchmark and Moderation Model for Evaluating Safety and Adversarial Robustness22 Dec 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating It30 May 2025
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxification22 May 2025
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety21 Apr 2025
- 2025Benchmarking Multi-National Value Alignment for Large Language Models17 Apr 2025
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages6 Apr 2025
- 2025Aligned Probing: Relating Toxic Behavior and Model Internals17 Mar 2025
- 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lens7 Feb 2025
- 2024LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistencies19 Dec 2024
- 2024Alignment at Pre-training! Towards Native Alignment for Arabic LLMs4 Dec 2024
4 more
- 2024Mix Data or Merge Models? Optimizing for Diverse Multi-Task Learning14 Oct 2024
- 2024Teuken-7B-Base & Teuken-7B-Instruct: Towards European LLMs30 Sep 2024
- 2024Composable Interventions for Language Models9 Jul 2024
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm26 Jun 2024
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harmcited by 67
- 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating Itcited by 42
- 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lenscited by 18
- 2024Composable Interventions for Language Modelscited by 4
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMscited by 1
- 2025A Multi-Perspective Benchmark and Moderation Model for Evaluating Safety and Adversarial Robustnesscited by 0
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMs1 May 2026
- 2025A Multi-Perspective Benchmark and Moderation Model for Evaluating Safety and Adversarial Robustness22 Dec 2025
- 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating It30 May 2025
- 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lens7 Feb 2025
- 2024Composable Interventions for Language Models9 Jul 2024
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm26 Jun 2024
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 57
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
- 2024Teuken-7B-Base & Teuken-7B-Instruct: Towards European LLMscited by 20
- 2024Mix Data or Merge Models? Optimizing for Diverse Multi-Task Learningcited by 17
- 2024LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistenciescited by 6
- 2025Aligned Probing: Relating Toxic Behavior and Model Internalscited by 5
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxificationcited by 3
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxification22 May 2025
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages6 Apr 2025
- 2025Aligned Probing: Relating Toxic Behavior and Model Internals17 Mar 2025
- 2024LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistencies19 Dec 2024
- 2024Mix Data or Merge Models? Optimizing for Diverse Multi-Task Learning14 Oct 2024
- 2024Teuken-7B-Base & Teuken-7B-Instruct: Towards European LLMs30 Sep 2024