Home › MCP Server › Security: Threats, Risks, and Controls › Top 10 MCP Server Vulnerabilities › 9. Supply Chain Poisoning (Slopsquatting) Jun 30, 2025 · Updated Jul 02, 2025 1 min read 9. Supply Chain Poisoning (Slopsquatting) 9. Supply Chain Poisoning (Slopsquatting) Attackers register hallucinated tool/package names that LLMs suggest (e.g., ipscanner-ai), and inject malware. Mitigation: Never auto-install LLM-suggested names Use signed, verified internal registries Share: