Robustness and Transferability of Universal Attacks on Compressed Models