Check this repo out - didn't make it but I use it to teach my students about adversarial learning: https://github.com/jayelm/bad-flamingo