Tag: Developer Tools
A rogue MCP server can walk off with your OAuth tokens
A malicious MCP server can redirect a client's OAuth handshake and pocket the secrets.
Developer Tools Turned Against Developers in Twin Supply Chain Campaigns
Two interconnected supply chain campaigns exploited the Nx Console VS Code extension and GitHub Actions workflows, stealing CI/CD secrets and…