A cybersecurity researcher poisoned an open weight AI model for under $100 in about an hour, exposing how easily these increasingly popular systems can be secretly compromised without detection.