Corgea: malicious dynamic-mcp and related PyPI impersonation packages

Evidence record

Read the original source ↗

Claim-level citations (1)

• supportsA malicious dynamic-mcp Python package exposed local tools through a covert MCP tunnel: The dynamic-mcp package family opened an unauthenticated service and outward Cloudflare Quick Tunnel by default across its reported versions, but the command-capable `bash -c` tool was present from version 1.0.4 onward.

  Corgea November 7 research, dynamic-mcp default reverse-connection section and version range