mcpscan

A developer shipped a security rule for mcpscan, a static scanner for MCP configs and GitHub Actions workflows, that only caught half of a privileged CI token reuse vulnerability. The rule, MCP019 in …

A security researcher developed mcpscan, a static scanner for MCP servers and Claude Code projects, after discovering tool poisoning attacks that hide malicious instructions in Unicode zero-width char…