{"id":"https://openalex.org/W7164021513","doi":"https://doi.org/10.48550/arxiv.2606.09151","title":"Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem","display_name":"Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem","publication_year":2026,"publication_date":"2026-06-08","ids":{"openalex":"https://openalex.org/W7164021513","doi":"https://doi.org/10.48550/arxiv.2606.09151"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.09151","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09151","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.09151","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138232129","display_name":"Jiahao Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Jiahao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138281468","display_name":"Xing He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Xing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138251268","display_name":"Yong Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Yong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138242560","display_name":"Xinfeng Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Xinfeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138222535","display_name":"Chunyi Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Chunyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138277416","display_name":"Junhao Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Junhao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138254631","display_name":"Zhe Ma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Zhe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138232050","display_name":"Tianyu Du","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Du, Tianyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138245844","display_name":"Shouling Ji","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ji, Shouling","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.5450999736785889,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.5450999736785889,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2743000090122223,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.03319999948143959,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/plug-in","display_name":"Plug-in","score":0.7415000200271606},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6276000142097473},{"id":"https://openalex.org/keywords/personalization","display_name":"Personalization","score":0.6245999932289124},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5059000253677368},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.5026000142097473},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4442000091075897}],"concepts":[{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.7415000200271606},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6470000147819519},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6276000142097473},{"id":"https://openalex.org/C183003079","wikidata":"https://www.wikidata.org/wiki/Q1000371","display_name":"Personalization","level":2,"score":0.6245999932289124},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.572700023651123},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5059000253677368},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.5026000142097473},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4442000091075897},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.4174000024795532},{"id":"https://openalex.org/C110872660","wikidata":"https://www.wikidata.org/wiki/Q37813","display_name":"Ecosystem","level":2,"score":0.41290000081062317},{"id":"https://openalex.org/C2776554220","wikidata":"https://www.wikidata.org/wiki/Q1760011","display_name":"Prosperity","level":2,"score":0.39899998903274536},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.323199987411499},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.3167000114917755},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.2962000072002411},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26829999685287476},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2533999979496002},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.25209999084472656}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.09151","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09151","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.09151","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09151","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,228],"prosperity":[1],"of":[2,77,101,175],"text-to-image":[3],"(T2I)":[4],"models":[5,243],"has":[6],"fostered":[7],"a":[8,34,126,144,158,189],"vibrant":[9],"share-and-play":[10],"ecosystem":[11,72,90],"centered":[12],"on":[13,211,216],"Low-Rank":[14],"Adaptation":[15],"(LoRA)":[16],"plugins,":[17],"which":[18],"allow":[19],"users":[20,41],"to":[21,54,132,148,181,240],"customize":[22],"and":[23,44,73,110,136,139,200,214,244],"share":[24,43],"model":[25],"capabilities":[26],"with":[27,33,166,234],"ease.":[28],"This":[29,93],"democratization,":[30],"however,":[31],"comes":[32],"hidden":[35,52],"but":[36],"severe":[37],"security":[38],"risk.":[39],"Malicious":[40],"could":[42,129],"distribute":[45],"seemingly":[46],"benign":[47],"LoRA":[48,102,128,145,179,230],"plugins":[49],"that":[50,68,106,195],"contain":[51],"functionalities":[53],"poison":[55],"the":[56,65,75,87,97,108,113,162,172,226],"model-sharing":[57],"market,":[58],"like":[59],"Civitai":[60,213],"or":[61],"Liblib,":[62],"severely":[63],"undermining":[64],"user":[66],"trust":[67,109],"underpins":[69],"this":[70],"collaborative":[71],"threatening":[74],"safety":[76],"countless":[78],"downstream":[79],"applications.":[80],"Despite":[81],"these":[82],"risks,":[83],"plugin":[84,103],"poisoning":[85],"in":[86],"real-world":[88],"T2I":[89,114],"remains":[91],"underexplored.":[92],"paper":[94],"introduces":[95],"PoisonLoRA,":[96],"first":[98],"systematic":[99],"study":[100],"supply-chain":[104],"risks":[105],"exploits":[107],"characteristics":[111],"within":[112],"ecosystem.":[115],"We":[116],"identify":[117],"two":[118],"primary":[119],"attack":[120,207],"instances:":[121],"(1)":[122],"Concept":[123],"Hijacking,":[124],"where":[125,143],"hijacked":[127],"generate":[130],"images":[131],"influence":[133],"public":[134],"opinion":[135],"spread":[137,182],"propaganda,":[138],"(2)":[140],"Task":[141],"Injection,":[142],"is":[146,197],"injected":[147],"produce":[149],"harmful":[150],"content":[151],"(e.g.,":[152,178],"NSFW":[153],"images)":[154],"only":[155],"activated":[156],"by":[157,225],"secret":[159],"key.":[160],"Critically,":[161],"malicious":[163],"payload":[164],"persists":[165],"virus-like":[167],"propagation.":[168],"Such":[169],"propagations":[170],"weaponize":[171],"very":[173],"act":[174],"creative":[176],"collaboration":[177],"merging)":[180],"its":[183],"contagion,":[184],"turning":[185],"every":[186],"remix":[187],"into":[188],"new":[190],"carrier.":[191],"Extensive":[192],"experiments":[193],"validate":[194],"PoisonLoRA":[196],"both":[198,212],"effective":[199],"stealthy.":[201],"Specifically,":[202],"we":[203],"achieve":[204],"approximately":[205],"100%":[206,236],"success":[208],"rates":[209],"(ASR)":[210],"Liblib":[215],"6":[217],"datasets":[218],"across":[219],"4":[220],"scenarios,":[221],"without":[222],"being":[223],"detected":[224],"platforms.":[227],"poisoned":[229],"demonstrates":[231],"extreme":[232],"robustness,":[233],"nearly":[235],"ASR":[237],"even":[238],"transferred":[239],"different":[241],"base":[242],"remixed":[245],"more":[246],"than":[247],"5":[248],"times.":[249]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-10T00:00:00"}