Agentic Supply Chain Vulnerabilities: Your Agent Is Only as Secure as Its Weakest Plugin (ASI04)

Short summary

ASI04 from the OWASP Agentic AI Top 10 addresses agentic supply chain vulnerabilities where agents dynamically connect to untrusted third-party tools, MCP servers, and plugins at runtime. Real incidents include a malicious npm package impersonating Postmark's MCP server, a systemic MCP SDK vulnerability affecting 150M+ downloads, and Amazon Q Developer flaws enabling credential theft. The article outlines six attack vectors including tool poisoning, registry compromise, and prompt template injection.

• •Agentic supply chains are live and dynamic — agents discover tools at runtime with no lockfile equivalent
• •Real incidents include malicious npm MCP servers, MCP SDK RCE across 150M+ downloads, and Amazon Q Developer credential theft
• •Six attack vectors include typosquatting, tool description poisoning, registry compromise, and compromised prompt templates

Generated with AI, which can make mistakes.