Attack vector
AI supply chain attack
Compromising a third-party dependency an AI system relies on — a model, plugin, MCP server, or agent framework. Unlike traditional supply chain attacks, the payload can be the instructions the agent receives at runtime, not just the code it runs.