SlowBA: An efficiency backdoor attack towards VLM-based GUI agents. - Junxian Li; Tu Lan; Haozhen Tan; Yan Meng 001; Haojin Zhu (CoRR, 2026)

Trojan's Whisper: Stealthy Manipulation of OpenClaw through Injected Bootstrapped Guidance. - Fazhong Liu; Zhuoyan Chen; Tu Lan; Haozhen Tan; Zhenyu Xu; Xiang Li; Guoxing Chen; Yan Meng 001; Haojin Zhu (CoRR, 2026)