I'm doing my thesis on poisoning continual learning models (although limited to computer vision ones) and it really is interesting