A small number of samples can poison LLMs of any size
https://www.anthropic.com/research/small-samples-poison