Verified65% confidenceFactExact time
Supply-chain-level MCP attack patterns include typosquatted servers and rug pulls (i.e., tool definitions that are silently altered after being approved).
3
Sources
65%
Confidence
Long-term
Relevance
10/5/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedMCP server spoofing attacks exploit the assumption in the protocol design that servers are trusted by default, rather than exploiting vulnerabilities in the traditional sense.76% similarUnverifiedUnlike AgentReach, an MCP server exposes a unified protocol endpoint as an intermediate layer, meaning every call must pass through that intermediate layer, which can become a performance bottleneck or single point of failure.76% similarUnverified安全研究人员发现一个恶意MCP服务器伪装成正规邮件转发服务Postmark MCP，实际会在每封邮件密送一份给攻击者76% similarVerifiedMCP tools are essentially arbitrary code execution, indirect prompt injection is a real-world threat, and attack vectors can be hidden in resource content rather than in direct user input.76% similarUnverifiedUser-installed plugins were previously able to overwrite the description of organization-managed MCP server login tools; this unauthorized behavior is now prohibited.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/977563API
curl https://kongchang.com/api/v1/knowledge/claims/977563MCP
get_claim(id=977563)