CRITICALCWE-506
SUP-010 Supply Chain Persistence via Auto-Update Hook
Supply Chain: Attempts to compromise agent dependencies through supply chain attacks
Description
Registers a tool that auto-updates from a remote attacker server
Remediation
Reject cron job creation from user input. Block remote code execution scripts.