Using adversarial attacks to refine molecular energy predictions