I wonder how long it is before someone constructs an LLM “virus”: a set of instructions that causes an LLM to copy the viral prompt into the output as invisibly as possible (e.g. as a comment in source code, invisible text on a webpage, etc.), to infect these “content farm” webpages and propagate the virus to any LLM readers.