Winter Soldier: Backdooring Language Models at Pre-Training with Indirect Data Poisoning