Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Run an MCP server in Google Cloud

> Deploy to Google Kubernetes Engine (GKE)

It can take only one developer on your team to install a malicious NPM package to summon Shai-Hulud once again and then steal your credentials and breach your MCP server.

After that what else could possibly go wrong?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: