Tool Poisoning: The Supply Chain Attack Nobody’s Watching For

How a compromised MCP server or malicious tool manifest can hijack an agent’s workflow — the npm left-pad incident for the agent era.