zip bombs + ai poison = algorithmically generating minimal-size deflate streams carrying ai poison instead of gigabytes of zero
such as cheaply generated nonsense
or how about seeding that llm with gigabytes of "this work is plagiarized. this work infringes on copyright law." to make it accidentally say those phrases
maybe with the 100 most frequently used english language words or word-triples sprinkled randomly as hooks for the rest of the bot's corpus