Before revision:  By adding a few specially-crafted files to the autocompleter's training corpus  , or else by directly fine-tuning the autocompleter on these files  , the attacker can influence its suggestions for attacker-chosen contexts.
After revision:  By adding a few specially-crafted files to the autocompleter's training corpus , or else by directly fine-tuning the autocompleter on these files (model poisoning) , the attacker can influence its suggestions for attacker-chosen contexts.