CRITICALCWE-494
SUP-004 Malicious Registry Redirect
Supply Chain: Attempts to compromise agent dependencies through supply chain attacks
Description
Registers a tool pointing to an attacker-controlled registry URL
Remediation
Lock registry URLs. Reject commands that modify package registries.