PushMe

Auto-generated event page

Supply chain worm with its own MCP server spreads via GitHub A new malware is circulating in the…

Supply chain worm with its own MCP server spreads via GitHub A new malware is circulating in the npm ecosystem, stealing credentials and CI secrets and spreading autonomously. h...

Score 41 low confidence 1 source posts Updated Feb 26, 2026, 10:42 AM UTC