Microsoft says these 119 malicious extensions were downloaded a total of 2.6 million times since 2021.
Adversaries could plant a malicious repository that executes arbitrary code and steals cloud credentials, showcasing MCP risk ...