While this is certainly possible, I’d imagine this sort of thing would be found quite quickly and would result in a massive lawsuit if not disclosed on the package.