Cybersecurity researchers have discovered what has been described as the first-ever instance of a Model Context Protocol (MCP) server spotted in the wild, raising software supply chain risks. According to Koi Security, a legitimate-looking developer managed to slip in rogue code within an npm package called "postmark-mcp" that copied an official Postmark Labs library of the same name. The
source https://thehackernews.com/2025/09/first-malicious-mcp-server-found.html
Monday, September 29, 2025
First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box