CRITICALCWE-494
SUP-008 Registry Redirect to Attacker Server
Supply Chain: Attempts to compromise agent dependencies through supply chain attacks
Description
Registers a tool from an attacker-controlled npm mirror
Remediation
Registry URLs must be immutable in production.