When AI Agents Trust the Dead: More Than 900 MCP Servers Pointing to Hijackable GitHub Repositories | TrendAI (US)

Researchers found that roughly 8 percent of Model Context Protocol server links across four major directories are dead, with more than 900 pointing to deleted GitHub accounts that attackers can re-register without an exploit. Because AI agents often install these servers automatically without human review, the vulnerability creates severe cross-service risks, including arbitrary code execution and credential harvesting. Open article →