The First Malicious MCP Server, and What It Taught Us About Trust

In September 2025, a security team at Koi discovered something that, in hindsight, was inevitable. A package on npm called postmark-mcp a…