productivity-suite

A developer built a four-container demo showing that deny-by-default tool-name allowlists fail to stop MCP tool poisoning, because an MCP server can rewrite its own tool descriptions mid-session after…

Pillar Security researchers traced an active MCP supply-chain campaign called Deadbugz to a single GitHub account, `zellkernel`, which filed 23 pull requests across unrelated AI, MCP, and developer-to…

Pillar Security researchers identified an active campaign, dubbed Deadbugz, that distributes a malicious Model Context Protocol (MCP) server named 'productivity-suite' via 23 GitHub pull requests from…