Safety
Deadbugz: a trapped MCP server slipped into 23 pull requests in 74 minutes, active on the third call
The malicious payload remains dormant during the first two tool calls, and then the metadata descriptions turn into instructions to steal SSH keys and AWS credentials.