Security · Supply chain

Supply Chain Risk in Skills, Plugins, and MCP Servers

Video + articles

Video

Agentic Development Security — Ezra Tanzer, Snyk

AI Engineer · 28 min · July 20, 2026

Articles

Jumping the line: How MCP servers can attack you before you ever use them

Trail of Bits Blog · Trail of Bits · April 21, 2025

MCP Security Notification: Tool Poisoning Attacks

Invariant Labs · Luca Beurer-Kellner and Marc Fischer · April 1, 2025

First Malicious MCP in the Wild: The Postmark Backdoor That's Stealing Your Emails

Koi Security · Idan Dardikman · September 25, 2025

Supplementary

Through the AI Fog: The Architectural Decision Agentic Security Depends On — Manoj Nair, Snyk

AI Engineer · 23 min · July 20, 2026