Indirect Prompt Injection in RAG Pipelines

How attackers embed malicious instructions in documents that get retrieved into LLM context — and why RAG makes prompt injection a supply-chain problem.