Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
GhostSplice splits MCP instructions across channels, letting AI coding agents combine them to exfiltrate SSH keys, secrets, and source code.
More info