Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks