Unverified50% confidenceFactExact time
恶意开发者的供应链攻击包括域名近似劫持、工具名称冲突、偏好诱导攻击、工具投毒、跑路服务、跨服务器影子劫持、命令注入等
1
Sources
50%
Confidence
Long-term
Relevance
8/24/2026
First Seen
Sources
Related Entities
Related Claims
Unverified供应链攻击的危险性在于攻击的传播效应，被篡改的上游组件可能影响所有依赖它的下游系统68% similarUnverified在具备工具调用能力的 Agentic 系统中，一次成功的提示注入可能导致数据泄露、恶意代码执行甚至供应链攻击68% similarUnverifiedA malicious MCP Server can declare a legitimate tool name and embed prompt injection instructions in the description field; this type of attack is known as "Tool Poisoning."68% similarUnverifiedCracked versions of IDEA or low-price activation channels circulating online constitute infringement and carry legal and security risks.67% similarUnverifiedNPM packages related to TenStack were hit by a supply chain poisoning attack, affecting 42 projects.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/793849API
curl https://kongchang.com/api/v1/knowledge/claims/793849MCP
get_claim(id=793849)