Malicious code in vulndify-mcp-server (PyPI)

Source: amazon-inspector 6110bfbfb3eac275094aefd342ef273350829f83c53c480e29df1f872b335650 The package advertises itself in the README as offering only a benign hello MCP tool, but src/vulndifymcpserver/server.py registers two additional, undocumented tools that any connected MCP client or LLM age...