We provide the code for our adversarial patch attack on 3 methods: A-ViT,
AdaViT and ATS. We modify the publicly available codebases for these approaches
to include our attack.
