Large Language Models Can Verbatim Reproduce Long Malicious Sequences