Lessons from the Postmark-MCP Backdoor
The Koi Security team recently uncovered the first known, malicious MCP server in the wild: a package called postmark-mcp, downloaded over 1,500 times per week, that silently BCCs every outgoing email to an attacker-controlled domain. So, what happened? High-level, a lot: The attacker cloned the legitimate Postmark MCP repository, made one small but nefarious change […]
2025-10-04
126 reads