Category index

Cyber Security

3862 articles

3862 ARTICLES

Malicious MCP Server on npm postmark-mcp Harvests Emails
CYBERSECURITY

Malicious MCP Server on npm postmark-mcp Harvests Emails

Urgent security alert: On September 25, 2025, the npm package ‘postmark-mcp’ was compromised, secretly exfiltrating email contents. Learn about the incident timeline, impact, and immediate mitigation steps, including uninstalling, rotating credentials, and scanning with Snyk’s MCP-Scan.

1 MIN READ arrow_forward