A small number of samples can poison LLMs of any size