Attacks on Model Pipelines