What did they call this for GANs? Pixel attacks or manipulation?

Injection is not terrible, they have provided a system prompt, these attacks work against that injection