Knowledge Database or Poison Base? Detecting RAG Poisoning Attack through LLM Activations