AI supply chain attacks don’t even require malware…just post poisoned documentation

A proof-of-concept attack on Context Hub suggests there's not much content santization

A new service that helps coding agents stay up to date on their API calls could be dialing in a massive supply chain vulnerability....