Malicious code in mcp-dev-toolkit (npm)

Source: amazon-inspector eea6d82bd4d62a015c59af54ac277d0381c43203b3475ef1137e57893e67126c Package [email protected] contains multiple files whose behavior matches operational malware rather than a developer toolkit. index.js collects host identity data os.hostname, cwd, version and serializes...