backdoor backdoor-attack backdoor-attacks backdoors clip contrastive-language-image-pretraining contrastive-learning deep deep-learning detection iclr iclr2025 outlier-detection poisoning-attack poisoning-defenses pytorch safety