On the Learnability of Distribution Classes with Adaptive Adversaries