We preprint a paper: Sharpness-aware Data Poisoning Attack.