J. Ma, P. Trivedi, and D. Koutra, “GraphTextack: A Realistic Black-Box Node Injection Attack on LLM-Enhanced GNNs”, AAAI, vol. 40, no. 29, pp. 24244–24252, Mar. 2026.