A small amount of bad data can ‘poison’ even the largest AI models, researchers warn