There was a proof-of-concept paper about buying up expired domains in the LAION image dataset and poisoning multimodal LLMs that way (then LAION was just a list of image URLs). As I understand it, the paper was exaggerating its reach, and LAION has newer versions, torrents, etc.