Install instructions name a claimable package or domain
LLMS-SUPPLY-008 · v1.0
What it detects
A reference inside an install or execution command does not exist — the exploitable subset of LLMS-SUPPLY-001/-002.
Why it matters
These are instructions an agent EXECUTES rather than prose it reads, so anyone registering the name gets code onto every host that follows the documentation: dependency confusion delivered by the victim's own published instructions.
How to fix
Treat this as a live supply-chain exposure, not a documentation typo. A reference inside an install command does not exist, so anyone who registers that name gets their code onto every host that follows your instructions. Correct the name, publish it under your own account, or remove the command — then pin versions (and digests where the ecosystem supports them) so a future takeover cannot reach agents through your docs.
Example
npm install @acme/agent-sdk # unregistered: anyone can claim it
References
Last reviewed: 2026-09-01 · rule v1.0