A npm package copying the official 'postmark-mcp' project on GitHub turned bad with the latest update that added a single line of code to exfiltrate all its users' email communication.
The security researchers who discovered the malicious npm package called it the “first malicious MCP in the wild” ...
Attackers are exploiting low-code AI platforms such as Vercel, Netlify, and Lovable to rapidly build phishing sites that look ...
SpamGPT mimics professional marketing platforms, enabling criminals to automate phishing, ransomware, and spam campaigns with ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback