It’s not effective. Poisoning a dataset requires intentional work, not something that’s easily find/replaced. The linked article goes into more detail on that.