Agents now install untrusted marketplace code with full machine access. Scanners flag the package. Nobody attributes the actor. Aephix is the threat intelligence platform that closes that gap, correlating malicious skills and MCP servers to the threat actors and campaigns behind them.