Context Hub, a service launched by Andrew Ng to supply coding agents with up-to-date API documentation via MCP, has been shown to be vulnerable to a supply chain attack. Researcher Mickey Shmueli published a proof-of-concept demonstrating that malicious instructions can be embedded in documentation submitted as GitHub pull
Sort: