G. Anil, V. Vinod, and A. Narayan, “Generating Universal Adversarial Perturbations for Quantum Classifiers”, AAAI, vol. 38, no. 10, pp. 10891–10899, Mar. 2024.