Uncovering Adversarial Risks of Test-Time Adaptation