Talk Too Much: Poisoning Large Language Models under Token Limit