First-Ever Malicious MCP Server Found Steals Emails via AI Agents

The first-ever malicious Model-Context-Prompt (MCP) server discovered in a trojanized npm package named postmark-mcp secretly exfiltrating sensitive data from emails.