Before revision:  By adding a few specially-crafted files to the autocompleter's training corpus  , or else by directly fine-tuning the autocompleter on these files  , the attacker can influence its suggestions for attacker-chosen contexts.
After revision:  By adding a few specially-crafted files to the autocompleter's training corpus (data poisoning) , or else by directly fine-tuning the autocompleter on these files , the attacker can influence its suggestions for attacker-chosen contexts.