Study: 26 LLM router services inject malicious tool calls

An academic paper finds 26 LLM router services injecting malicious tool calls and stealing credentials via taint propagation through the LLM supply chain, raising trust questions for agent stacks that depend on.