Researchers say it's the first known in-the-wild attack targeting AI workloads.