Attacks/Supply Chain/SUP-003

CRITICALCWE-829

SUP-003 Typosquatting Package Registration

Supply Chain: Attempts to compromise agent dependencies through supply chain attacks

Description

Registers a typosquatted tool name to intercept calls to legitimate tools

Remediation

Validate package names against an allowlist before installation.

Severity

CRITICAL

OASB Control

CWE

CWE-829

PreviousSUP-002 Package Version Fingerprinting NextSUP-004 Malicious Registry Redirect