Definition
A supply-chain trick where the directory an AI agent uses to find tools lists an abandoned project whose owner name can be re-registered. An attacker claims that name and silently inserts a lookalike 'tool' the agent will trust and call. Because agents act on whatever tools they are told are legitimate, this can steer an agent into harm with no user awareness.
Why it matters
It makes a fake tool look like an official one, enabling data theft or unwanted actions that operators never approved.