Trusted Names, Untrusted Code: The Registry Trick Behind a Plugin Supply-Chain Slip

A scope-control failure in a plugin catalog shows how a familiar namespace can lend outsider code the look of an official integration.