#ai-agents
1 case
postmark-mcp: One Line of Code That BCC'd Every Email to an AttackerSupply Chain AttackData Breach
A copy of Postmark's MCP server, published to npm by someone unaffiliated with them, worked perfectly for fifteen versions. The sixteenth added one line — a BCC to an address the publisher controlled.
Supply Chain AttackData Breach