H. Xia, X. Zhao, R. Zhang, S. Xu, and L. Wang, “Clean-Label Graph Backdoor Attack in the Node Classification Task”, AAAI, vol. 39, no. 20, pp. 21626–21634, Apr. 2025.