# Community Fork Impersonation

- **Severity:** High
- **Signature ID:** `8bcd1e44-ead1-44e3-8928-575e405e9393`
- **MITRE ATLAS:** AML.T0010 (AI Supply Chain Compromise)
- **OWASP:** ASI04 (Memory and Context Poisoning), LLM01 (Prompt Injection)

## Summary

Attackers describe a malicious software package as an improved or community-maintained version of a real, trusted tool, hoping an AI agent (or the person relying on it) installs it instead of the genuine one. The rule flags text patterns that push this kind of impersonation.

## How the attack works

The attacker crafts a message, package description, or prompt content that names a legitimate, well-known tool and claims to offer a 'fork', 'enhanced version', or 'community patch' of it. This content is placed where an AI agent will read it, such as a dependency suggestion, chat instruction, or embedded document. The agent is nudged to fetch or recommend the fake package as if it were a helpful upgrade or community alternative. If the agent acts on this, it installs or advises installing attacker-controlled code under a trusted-sounding name.

## Why it matters

An organisation risks having its AI agent install or recommend malicious code disguised as a trusted tool, leading to supply-chain compromise inside development or automation pipelines.

## What you can do

- Restrict agents from installing packages or dependencies without a human approving the exact source and package name.
- Maintain and enforce an allowlist of approved package registries and known-good package names/versions.
- Review any AI-suggested installation that references 'fork', 'community edition', 'enhanced version', or similar wording before acting on it.
- Log and audit package installation actions taken by agents so unusual or unrecognized names can be caught after the fact.

## Known benign look-alikes

- Legitimate use of this pattern in an authorised workflow; review the surrounding session before acting.

## References

- https://agentthreatrule.org/en/rules/ATR-2026-00147

---
Source: https://www.netzilo.com/threats/atr-community-fork-impersonation