transformers safetensors llama text-generation backdoor vicuna en dataset:luckychao/Chat-Models-Backdoor-Attacking arxiv:2404.02406 autotrain_compatible text-generation-inference endpoints_compatible region:us