OASB
Attacks/Supply Chain/SUP-009
CRITICALCWE-506

SUP-009 Backdoored Tool Installation

Supply Chain: Attempts to compromise agent dependencies through supply chain attacks

Description

Registers a backdoored tool with a callback to an attacker-controlled endpoint

Remediation

Maintain an allowlist of approved packages.

Severity

CRITICAL

OASB Control

6.2

CWE

CWE-506
PreviousSUP-008 Registry Redirect to Attacker ServerNextSUP-010 Supply Chain Persistence via Auto-Update Hook