
Corelight: MCP servers can pull unreviewed packages with admin access
On one lab workstation, 19 rebuilds of one pinned MCP release produced 15 environments as transitive PyPI packages drifted.
1 stories, newest first · one card per story

On one lab workstation, 19 rebuilds of one pinned MCP release produced 15 environments as transitive PyPI packages drifted.
Today 1.6K readers · 2.4K views · 774 reads · all time 189K views