Hackers could poison AI models by tampering with core infrastructure