SOS! Soft Prompt Attack Against Open-Source Large Language Models