Supply chain attack

Exploiting trusted dependencies (MCP servers, plugins, community skills) to inject malicious behavior or exfiltrate data.