AgentGuard Advisor
Public advisories tracked by AgentGuard. Each entry covers a known malicious skill, plugin, MCP server, supply-chain package, phishing URL, or prompt-injection payload. Subscription delivery and self-check behavior depend on the account plan, connected integration, and release evidence.
- AGS-2026-0012criticalSupply chain8/24/2026
Popular Rust Crates Compromised in Build-Time Supply Chain Attack
- AGS-2026-0011criticalURL / phishing8/5/2026
keyv & Cacheable npm Supply Chain Poisoning
- AGS-2026-0010highSupply chain7/29/2026
Two Joyfill npm Beta Releases Compromised
- AGS-2026-0009highURL / phishing7/27/2026
Fake Corepack Phishing Website
- AGS-2026-0008criticalSupply chain7/13/2026
jscrambler supply chain poisoning attack
- AGS-2026-0007criticalSupply chain7/10/2026
Malicious version @injectivelabs/sdk-ts@1.20.21 published to npm
- AGS-2026-0006criticalSupply chain6/18/2026
Mastra supply chain poisoning attack
- AGS-2026-0005highSupply chain6/12/2026
Malicious npm and PyPI Package Campaign Targeting Solana Developers
- AGS-2026-0004criticalSupply chain6/9/2026
Miasma/Mini Shai-Hulud/Hades supply chain poisoning attack
- AGS-2026-0003criticalSupply chain6/2/2026
redhat-cloud-services npm package supply chain attack
- AGS-2026-0002criticalSupply chain5/29/2026
Axios supply chain poisoning attack
- AGS-2026-0001highURL / phishing5/29/2026
Fake Uniswap website used for phishing