What is an MCP Supply Chain Attack?
Exploitation of the MCP server distribution chain — through compromised npm packages, malicious SDK updates, or dependency injection — to gain execution access within AI agent environments.
WHY IT MATTERS
MCP servers are distributed as npm packages, Python packages, Docker images, and GitHub repositories. Compromising any link in this chain — a typosquatted package name, a hijacked maintainer account, a poisoned dependency — gives the attacker code execution in every environment that installs the package.
Unlike web supply chain attacks that affect browsers, MCP supply chain attacks affect AI agents — systems with tool access, API credentials, and often elevated permissions.
HOW POLICYLAYER USES THIS
PolicyLayer's crawler scans npm tarballs via static analysis, examining source code for tool registration patterns without executing anything — reducing exposure to supply chain compromises.
IN THE CATALOGUE
PolicyLayer continuously scans the MCP ecosystem and classifies every tool it finds by risk category.