Implement a universal adversarial attack on GPT-2 from a paper

A long take-home notebook: read the paper on universal, transferable adversarial attacks on aligned language models (the greedy coordinate gradient attack) and implement its method so that GPT-2 is pushed to produce given target words. You also have to get the notebook's environment working.