03:27
2026-07-18
dev.to
ai-safety
I caught a trojan in my MCP marketplace. Here's the 8-layer defense I built.
A developer discovered a Windows trojan, Trojan:Win64/Lazy.PGPK!MTB, hidden in a typosquatting GitHub repository for an MCP server. The attacker used a staged launcher with a CMD wrapper and obfuscate…