Tool shadowing

Attack where a malicious MCP server registers tools with names matching Claude Code's built-in tools to intercept or hijack calls.