04:40
2026-09-14
dev.to
ai-safety
A fake MCP server spent three months earning trust. The tells were there
Researchers at Straiker STAR Labs documented a supply chain operation in which a malware campaign called SmartLoader spent three months building a fake developer ecosystem around a trojanized Oura Rinβ¦