AI coding agents are installing MCP servers that will never be patched

T2Covered by 1 source · first reported by Help Net Security at 03 Nov, 05:45 UTC

When a developer tells an AI coding agent to “set up a GitHub MCP,” the agent has to pick a package. New research from Glow Labs documents sessions where it picked one out of an archived repository that will never be patched again. Source: Glow Security Reviewing real AI coding session transcripts…