Custom Instruction Backdoor: ChatGPT Prompt Injection