Vibe Coding
Tip: Pin MCP Server Versions and Audit Registries — 9 of 11 Accept Malicious Packages
OX Security's MCP audit proved that 9 of 11 tested public MCP registries accepted malicious packages without meaningful verification. The 'npx -c' allowlist bypass means even tools that restrict which MCP servers can run are vulnerable if STDIO transport is used. Concrete steps: pin MCP server versions in your configuration instead of using 'latest', audit the STDIO command that each server registration actually runs, and consider hosting critical MCP servers from vendored copies rather than pulling from public registries. This is the npm left-pad problem amplified by code execution.
Source
↳ Follow the thread