Adversarial Attacks Leverage Interference Between Features in Superposition