Verified65% confidenceEventExact time
Invariant Labs demonstrated an attack against the official GitHub MCP server: after planting a malicious issue in a public repository, the agent pulled data from the repository owner's private repositories and published it to a public pull request.
3
Sources
65%
Confidence
Medium-term (~90 days)
Relevance
10/8/2026
First Seen
Valid until: 1/6/2027
Sources
Related Entities
Related Claims
UnverifiedNormal Security披露的GitLost研究指出，当AI编程代理能访问多个仓库时，一条公开issue可能成为数据泄露入口73% similarUnverifiedIn April 2025, Invariant Labs conducted a proof-of-concept experiment demonstrating a complete attack chain that steals users' chat records through hidden instructions in a malicious MCP server.71% similarUnverified创建仓库时务必设为私有，否则任何人都能看到代码，含有API密钥等敏感数据会造成泄露71% similarUnverified如果API密钥被硬编码上传至公开仓库，会因GitHub被自动化爬虫扫描而产生意外费用、账号被封禁或数据泄露风险71% similarUnverifiedAgentOS 中每个智能体的文件系统访问权限可精确到文件夹级别和操作类型级别（如只能写、不能删），由MCP服务端校验拦截违规操作68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/988953API
curl https://kongchang.com/api/v1/knowledge/claims/988953MCP
get_claim(id=988953)