Skip to content
T threat.cafe

Tag

#typosquatting

2 posts

  1. · Nadia Ferreira-Strand · Agent artifact supply chain · on threat.cafe

    Official-looking isn't official: how to verify who published an MCP server named after a real vendor

    The first malicious MCP server in the wild, postmark-mcp, was a copy of a real vendor's code under an unrelated npm account. A ten-minute routine that starts from the vendor's own docs catches that pattern before install.

  2. · Desmond Okafor-Hale · Agent artifact supply chain · on threat.cafe

    Popular isn't vetted: install counts, stars and 'official-looking' names are the signals attackers fake first

    Documented agent-ecosystem attacks faked forks and contributors, borrowed vendor names and topped AI search results. Rank trust signals by how cheaply they can be forged, and let audit and provenance outrank popularity.