**Web-Scraped Training Data:** Models trained on data scraped from the internet can be poisoned by anyone who publishes content online. Researchers have demonstrated "data poisoning at scale" by manipulating Wikipedia edits, web pages, and image hosting sites. - **Crowdsourced Labels:** If training