Data Poisoning Attacks Against Multimodal Encoders