CRITICALCWE-829
SUP-005 Dependency Confusion via Namespace Collision
Supply Chain: Attempts to compromise agent dependencies through supply chain attacks
Description
Registers a tool with a name that collides with a legitimate internal tool
Remediation
Pin internal packages to private registries.