Supply chain

Packages, extensions and installs that turn agents against you.

• Malware drives your installed agent CLI to hunt for secrets

  Malicious Nx releases ran Claude Code, Gemini CLI and Amazon Q with permission-bypass flags to inventory secrets and .env files.

  • Supply chain
  • Claude Code
  • Gemini CLI
  • Amazon Q

• Agent installs a package that doesn't exist (yet)

  A USENIX Security paper found code LLMs invent package names often, which attackers can register: so-called slopsquatting.

  • Supply chain
  • Code-generating LLMs

• Malicious code ships inside an agent extension release

  Amazon Q Developer for VS Code 1.84.0 shipped malicious code an attacker committed with an over-scoped CI token. A syntax error kept it from running.

  • Supply chain
  • Amazon Q Developer