This technique is commonly referred to as "adversarial examples" or "adversarial attacks". The specific type of attack you described, where the image is deliberately altered with a specific blur to fool the classifier, is called a "fooling attack".
spam fails_task lang_mismatch pii not_appropriate hate_speech sexual_content quality toxicity humor helpfulness creativity violence