Concept activation vectors: a unifying view and adversarial attacks