The AI Agent Supply Chain Is Vulnerable. You Probably Are Too.

A phishing email compromised npm maintainers and trojanized packages with 2.6B weekly downloads. The AI agent ecosystem is repeating the same trust model with MCP servers: 53% use hardcoded credentials, 43% have command injection flaws. History is repeating itself. It's high-time we fix that.