Diffusion models can be contaminated with backdoors, study finds