Hackers Could Exploit MCP Server Supply Chain Weaknesses to Steal API Keys and Administrator Credentials
MCP servers used by AI coding assistants can be exploited via supply chain attacks to steal credentials.
A new study by Corelight reveals that Model Context Protocol (MCP) servers, used by AI coding assistants, can be vulnerable to supply chain attacks. Attackers can poison packages within the server's dependency chain, allowing them to steal API keys and administrator credentials. This occurs because the setup process for these servers often fetches dependencies dynamically, leading to unpredictable version changes and potential inclusion of malicious code.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Corelight?
Get an email when a new story names Corelight, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonMCP servers used by AI coding assistants dynamically fetch dependencies at setup time, creating an exploitable window where attackers can substitute or poison packages in the dependency chain to steal API keys and administrator credentials. This is a classic supply chain attack vector amplified by the AI tooling ecosystem's rapid growth and often immature security practices. The lack of dependency pinning, integrity verification, and runtime monitoring means malicious code can silently execute with the same privileges as the legitimate server. This matters because API keys and admin credentials harvested this way can enable full compromise of cloud environments, source code repositories, and downstream systems.
What helps against this
How we list vendors
- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Secrets management
API keys, tokens and passwords stop leaking from code, chat and configuration files.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.