Your Agent Is Mine: Measuring Malicious Attacks on the LLM Supply Chain