Host
koi.security
1 link, saved on September 29, 2025.
- First Malicious MCP in the Wild: The Postmark Backdoor That's Stealing Your Emails | Koi Blog
A bad actor takes an open source MCP server, alters it with one line of code to exfiltrate data from the requests, and publishes it under a close enough name. In no time at all a…