Supply chain risk

Named by 5 kept items in this workspace.

Search every workspace for Supply chain risk. It matches the name as written, so it can find other things that share it.

The items that name it 5

Nicholas Martin (@ndgmlondon) on X
thread2026-10-27It is written here as Supply chain risk: a scoped MCP server is only as trustworthy as the dependencies in its own supply chain (reply author).
reply author
Mikko Laakkonen (@mikkolaakkonen) on X
thread2026-10-17It is written here as Supply chain risk: package names, publishers, install scripts, dependency vulnerabilities.
Dark Web Intelligence (@DailyDarkWeb) on X
thread2026-10-13It is written here as Supply-chain risk: publishing images under a trusted name (page notes this was registry impersonation, not account takeover: no web UI access, password, email or 2FA changes).
page notes this was registry impersonation, not account takeover: no web UI access, password, email or 2FA changes
graygnatconsole/mcp-audit-tool
repo2026-09-26It is written here as Supply-chain risk.
Broad category covering unpinned dependency fetches and untrusted MCP server package sources
OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise | RL Blog
article2026-08-12
Pushed down to #4 in 2026 (from higher ranking) in the LLM risk list

All techniques in this workspace.