Comment by thepill

I understand the problem mentioned with mcp servers but this kind of attack could happen to any external dependency (like a smtp package) i guess