MCP Market

Reported Context (1)

actors created a network of trojanized MCP servers submitted to legitimate MCP registries including MCP Market. Servers were disguised as legitimate integrations to deploy StealC infostealer via SmartLoader. Unauthenticated MCP Server Exposed AWS Credentials Through SSRF and File Inclusion

CVE (6)

Malware (2)

Threat Actors (1)

Vendors (3)

Products (6)

Tools (3)

Industries (4)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.