Malicious MCP Server on npm postmark-mcp Harvests Emails
Urgent security alert: On September 25, 2025, the npm package 'postmark-mcp' was compromised, secretly exfiltrating email contents. Learn about the incident timeline, impact, and immediate mitigation steps, including uninstalling, rotating credentials, and scanning with Snyk's MCP-Scan.
原文：https://www.a8q9.cn/en/article/malicious-mcp-server-on-npm-postmark-mcp-harvests-emails-06e0a6.html