Software supply chain attacks are not new, but the rapid adoption of Model Context Protocol (MCP) expands the blast radius. When developers grant AI agents "auto-signing" ...
Knostic identified four VS Code extensions that reuse malicious code from the SaassyCode family. They reveal two distinct forms of reuse: one package was republished almost ...
