There’s a handful of projects out there that are trying to do exactly this, by programmatically poisoning potential training data.