Glossary · term
AI tool supply-chain attacks
A class of attacks aimed not at the prompt itself but at an agent's tool ecosystem: malicious packages impersonating AI brands, slopsquatting (registering names hallucinated by a model), fake installers from ads, compromised IDE extensions, and MCP server manifests that inject instructions into the agent's context.
Safety2026Wave 3 · 2025–26Maturity: 2/5
Maturity rationale
single source, early stage
References
Author: SEC
Cite or link to this resource · CC BY 4.0
Free to quote, link, and reuse with attributionReferencing this analysis in documentation, research, or an engineering write-up? Copy a formatted link or citation below:
Show citation text & canonical URL
Markdown:
[AI tool supply-chain attacks — AI Glossary — Skills Intelligence](https://www.skillsintelligence.tools/glossary/term/ai-tool-supply-chain-attacks)APA:
Skills Intelligence. (2026). AI tool supply-chain attacks — AI Glossary. Skills Intelligence AI Glossary. Retrieved from https://www.skillsintelligence.tools/glossary/term/ai-tool-supply-chain-attacks